Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-15_10d9dfb4aaee875a028af9be0301b22d_cryptolocker

  • Size

    47KB

  • Sample

    240315-qqtxmabe78

  • MD5

    10d9dfb4aaee875a028af9be0301b22d

  • SHA1

    92df03e14d4f80b0648c840404d21ed49a3e8211

  • SHA256

    5032e44a5f92eaed784251876af70d501ee45b5a24203a8e13e604179db8ca5d

  • SHA512

    c34f8ffceddbc0f0f332c788a54b40f52d548feb6258857912e9ef11660e6724091051ca77cd935c1612baacb8fc1ae9243650277578cf296547bd86930627b1

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Mo4Xh:qmbhXDmjr5MOtEvwDpj5cDtKkQZQSgK

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_10d9dfb4aaee875a028af9be0301b22d_cryptolocker

    • Size

      47KB

    • MD5

      10d9dfb4aaee875a028af9be0301b22d

    • SHA1

      92df03e14d4f80b0648c840404d21ed49a3e8211

    • SHA256

      5032e44a5f92eaed784251876af70d501ee45b5a24203a8e13e604179db8ca5d

    • SHA512

      c34f8ffceddbc0f0f332c788a54b40f52d548feb6258857912e9ef11660e6724091051ca77cd935c1612baacb8fc1ae9243650277578cf296547bd86930627b1

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Mo4Xh:qmbhXDmjr5MOtEvwDpj5cDtKkQZQSgK

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks