Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-12_5569e7a13c0d2131ee85c27d86441f5e_cryptolocker

  • Size

    52KB

  • Sample

    240312-2n771sch4z

  • MD5

    5569e7a13c0d2131ee85c27d86441f5e

  • SHA1

    c72645a063c92d089a2f5321239b19de91368ee8

  • SHA256

    7ebdafa676ee8ce095efc18318e906dbe3d5969192987c76133ad27081ccb9e6

  • SHA512

    785692bbf7002e9f2aad8d277786f790e961b6ab9d9e35b2c32ec00be2d9c16111253ed8c54418c256dc6e0410b7cbb5fb53e4feb51172f1376c01f3467fbf61

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6Impyq:BbdDmjr+OtEvwDpjM1

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_5569e7a13c0d2131ee85c27d86441f5e_cryptolocker

    • Size

      52KB

    • MD5

      5569e7a13c0d2131ee85c27d86441f5e

    • SHA1

      c72645a063c92d089a2f5321239b19de91368ee8

    • SHA256

      7ebdafa676ee8ce095efc18318e906dbe3d5969192987c76133ad27081ccb9e6

    • SHA512

      785692bbf7002e9f2aad8d277786f790e961b6ab9d9e35b2c32ec00be2d9c16111253ed8c54418c256dc6e0410b7cbb5fb53e4feb51172f1376c01f3467fbf61

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6Impyq:BbdDmjr+OtEvwDpjM1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks