Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-22_55f049f0ea45dd3fb32a70ee81039706_cryptolocker

  • Size

    385KB

  • Sample

    240222-a5pnfshh64

  • MD5

    55f049f0ea45dd3fb32a70ee81039706

  • SHA1

    d141d74998f4a17c1af1752cd9f3ea61d7292e24

  • SHA256

    db3503fc62fde63eba2fdfac2cf465ef0ef17e2c7c7694dd58da429e49d2e089

  • SHA512

    556efc3d0d50c3f0952913b59cff279548be84b31b204417c8aef8d618e518c16c016b63c4f866cb37ecf0f42bc529a665ed2468092c8b5256ade42de9422ea4

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXn:nnOflT/ZFIjBz3xjTxynGUOUhXn

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_55f049f0ea45dd3fb32a70ee81039706_cryptolocker

    • Size

      385KB

    • MD5

      55f049f0ea45dd3fb32a70ee81039706

    • SHA1

      d141d74998f4a17c1af1752cd9f3ea61d7292e24

    • SHA256

      db3503fc62fde63eba2fdfac2cf465ef0ef17e2c7c7694dd58da429e49d2e089

    • SHA512

      556efc3d0d50c3f0952913b59cff279548be84b31b204417c8aef8d618e518c16c016b63c4f866cb37ecf0f42bc529a665ed2468092c8b5256ade42de9422ea4

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXn:nnOflT/ZFIjBz3xjTxynGUOUhXn

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks