Overview

overview

10

Static

static

10

2024-02-20...er.exe

windows7-x64

9

2024-02-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-20_be55d81b04464717a060b8a1ec6055f8_cryptolocker

  • Size

    130KB

  • Sample

    240220-sedglsab8w

  • MD5

    be55d81b04464717a060b8a1ec6055f8

  • SHA1

    25c59d6248e0ac9317e51cfa13f858bac9b63e01

  • SHA256

    5713f347d6a22e5879171d4388d3c408bda326986bc7c608ae5d202e48beea17

  • SHA512

    9bcede9382a1151935d09793a4a7affb38d6fa2fd5e2b67628c400357b3a059539e25cf7a2a777b15c53d88425ffc1f00811698c7dc4495250776540f31dec45

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1eds:V6a+pOtEvwDpjtzc

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_be55d81b04464717a060b8a1ec6055f8_cryptolocker

    • Size

      130KB

    • MD5

      be55d81b04464717a060b8a1ec6055f8

    • SHA1

      25c59d6248e0ac9317e51cfa13f858bac9b63e01

    • SHA256

      5713f347d6a22e5879171d4388d3c408bda326986bc7c608ae5d202e48beea17

    • SHA512

      9bcede9382a1151935d09793a4a7affb38d6fa2fd5e2b67628c400357b3a059539e25cf7a2a777b15c53d88425ffc1f00811698c7dc4495250776540f31dec45

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp699GNtL1eds:V6a+pOtEvwDpjtzc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks