Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_b67663667e5ed9223ac5fcffa0772dcf_cryptolocker

  • Size

    62KB

  • Sample

    240312-1gkygadc67

  • MD5

    b67663667e5ed9223ac5fcffa0772dcf

  • SHA1

    d7f5f1fe427d5dbff2b8303d6c214577a7db7b4e

  • SHA256

    9ddff6036fc6caf05d1b0c3711a64f04d7514f5c81ebb91c6b9674a8437209b3

  • SHA512

    c67bcd2f6d7f3d550eadd8f95b95655b3f0ef57089655f814a626ba7660bbf20be4da85eca261f8f1cef229be9262d8465841255b8ecc57ae811f2497fc923ec

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsN:BbdDmjr+OtEvwDpjM8l

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_b67663667e5ed9223ac5fcffa0772dcf_cryptolocker

    • Size

      62KB

    • MD5

      b67663667e5ed9223ac5fcffa0772dcf

    • SHA1

      d7f5f1fe427d5dbff2b8303d6c214577a7db7b4e

    • SHA256

      9ddff6036fc6caf05d1b0c3711a64f04d7514f5c81ebb91c6b9674a8437209b3

    • SHA512

      c67bcd2f6d7f3d550eadd8f95b95655b3f0ef57089655f814a626ba7660bbf20be4da85eca261f8f1cef229be9262d8465841255b8ecc57ae811f2497fc923ec

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsN:BbdDmjr+OtEvwDpjM8l

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks