Overview

overview

10

Static

static

10

2024-02-24...er.exe

windows7-x64

9

2024-02-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-24_ebeb97d3846b38880b4e6aa8a539c9a1_cryptolocker

  • Size

    47KB

  • Sample

    240224-n9j6esbb37

  • MD5

    ebeb97d3846b38880b4e6aa8a539c9a1

  • SHA1

    4090e853a09c4c19002a342b8cdd0e1ae24261b7

  • SHA256

    b8b5e9ad31eee2d9492da25072424afa1d00c8e7aad99fd1bf7ff68d62901a3a

  • SHA512

    83fae8c8c08b94c4f630ff6b9f439c18750836e7620c76a1fc75bba93ed70b0d62a649752881ac828573c5727ca52ec16b1391e14421b92170cad2e275756022

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBG:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6c

Score
10/10

Malware Config

Targets

    • Target

      2024-02-24_ebeb97d3846b38880b4e6aa8a539c9a1_cryptolocker

    • Size

      47KB

    • MD5

      ebeb97d3846b38880b4e6aa8a539c9a1

    • SHA1

      4090e853a09c4c19002a342b8cdd0e1ae24261b7

    • SHA256

      b8b5e9ad31eee2d9492da25072424afa1d00c8e7aad99fd1bf7ff68d62901a3a

    • SHA512

      83fae8c8c08b94c4f630ff6b9f439c18750836e7620c76a1fc75bba93ed70b0d62a649752881ac828573c5727ca52ec16b1391e14421b92170cad2e275756022

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBG:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6c

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks