Overview

overview

10

Static

static

10

2024-02-27...er.exe

windows7-x64

9

2024-02-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-27_e850edd33b3649b65111dec5d92ba44a_cryptolocker

  • Size

    31KB

  • Sample

    240227-t49rsaed5x

  • MD5

    e850edd33b3649b65111dec5d92ba44a

  • SHA1

    7aad0ce1995286f1f52e37f9dcd43075b2579f56

  • SHA256

    26207de13d0ec740232d099299b1df89c9f011db82f46f7166950e7818c012e0

  • SHA512

    f30262a0449f8ab66937d2774c851d213fad807f8fe35f42f5c9f5efb71545ea749d7c821a3a4645a0abbb490e7ff28a739e0e306beb0fd132f5f3c138cfeb95

  • SSDEEP

    768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tH3ME:q0zizzOSxMOtEvwDpj/arqH

Score
10/10

Malware Config

Targets

    • Target

      2024-02-27_e850edd33b3649b65111dec5d92ba44a_cryptolocker

    • Size

      31KB

    • MD5

      e850edd33b3649b65111dec5d92ba44a

    • SHA1

      7aad0ce1995286f1f52e37f9dcd43075b2579f56

    • SHA256

      26207de13d0ec740232d099299b1df89c9f011db82f46f7166950e7818c012e0

    • SHA512

      f30262a0449f8ab66937d2774c851d213fad807f8fe35f42f5c9f5efb71545ea749d7c821a3a4645a0abbb490e7ff28a739e0e306beb0fd132f5f3c138cfeb95

    • SSDEEP

      768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tH3ME:q0zizzOSxMOtEvwDpj/arqH

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks