Overview

overview

10

Static

static

10

2024-02-21...er.exe

windows7-x64

9

2024-02-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-21_042925c5af3a1b7f9d80734c823e4c99_cryptolocker

  • Size

    61KB

  • Sample

    240221-rpyd4agg6y

  • MD5

    042925c5af3a1b7f9d80734c823e4c99

  • SHA1

    7906319513a152888a3ab38f4a850bc0a1ce6920

  • SHA256

    93990ef12d93e9f50c84da59169118506ce3c3c99dbe4c780c787d3c7b12f3ad

  • SHA512

    a28f8bb82c26c41a4e13c6c038e313a4e95ba3c1cec2bcb538c8b2d58c3b9fa85b4a3950ca8b7f6a370dc35846895fe2fb59c65ec8cb322adc05e9ecaeb67882

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtskP2:BbdDmjr+OtEvwDpjM8T

Score
10/10

Malware Config

Targets

    • Target

      2024-02-21_042925c5af3a1b7f9d80734c823e4c99_cryptolocker

    • Size

      61KB

    • MD5

      042925c5af3a1b7f9d80734c823e4c99

    • SHA1

      7906319513a152888a3ab38f4a850bc0a1ce6920

    • SHA256

      93990ef12d93e9f50c84da59169118506ce3c3c99dbe4c780c787d3c7b12f3ad

    • SHA512

      a28f8bb82c26c41a4e13c6c038e313a4e95ba3c1cec2bcb538c8b2d58c3b9fa85b4a3950ca8b7f6a370dc35846895fe2fb59c65ec8cb322adc05e9ecaeb67882

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtskP2:BbdDmjr+OtEvwDpjM8T

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks