Overview

overview

10

Static

static

10

2024-03-13...er.exe

windows7-x64

9

2024-03-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-13_d2ea0b4ade5fe1e0e2f234ea917e8c7b_cryptolocker

  • Size

    52KB

  • Sample

    240313-ly5a4sae5w

  • MD5

    d2ea0b4ade5fe1e0e2f234ea917e8c7b

  • SHA1

    692087deb676cba013b21261ba6bc5f8972201dc

  • SHA256

    42eaf5921a346fa7e1892322795b56ae595b1d12680b324ec61c4ab318432520

  • SHA512

    9354817b477b787aabd59802dcd79768064a5580495172477bfe17926ebb16261a06c59898e06e89dfff70935884020abfeadcd81c13529efa0f57442d263b27

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6ImpyY:BbdDmjr+OtEvwDpjML

Score
10/10

Malware Config

Targets

    • Target

      2024-03-13_d2ea0b4ade5fe1e0e2f234ea917e8c7b_cryptolocker

    • Size

      52KB

    • MD5

      d2ea0b4ade5fe1e0e2f234ea917e8c7b

    • SHA1

      692087deb676cba013b21261ba6bc5f8972201dc

    • SHA256

      42eaf5921a346fa7e1892322795b56ae595b1d12680b324ec61c4ab318432520

    • SHA512

      9354817b477b787aabd59802dcd79768064a5580495172477bfe17926ebb16261a06c59898e06e89dfff70935884020abfeadcd81c13529efa0f57442d263b27

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6ImpyY:BbdDmjr+OtEvwDpjML

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks