Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-27_e05f2216dd2d2a8a5b8dbdb597dc8c69_cryptolocker

  • Size

    27KB

  • Sample

    240327-q4xwfadd65

  • MD5

    e05f2216dd2d2a8a5b8dbdb597dc8c69

  • SHA1

    129b80796489ceebd076b5052f4a5f13d5fb74fb

  • SHA256

    302fdcbb767cb53ad02fa626df3d8288297de19f35cf1302287a9aa1ae919935

  • SHA512

    4035dbc5c5c999987c135027b7ca9d293becfade9f75a25b933757601858fe8f2ab78aebef41fe6876e48ff8db2b4caefcaba438aafb77af6f244267a7fc0930

  • SSDEEP

    384:qxOZzyjOnqGAs+8ULueO4NdE8tOOtEvwDpjqIGRYK1sGGYkxlmwk:q0ZziOWwULueOSdE8tOOtEvwDpjeoA

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_e05f2216dd2d2a8a5b8dbdb597dc8c69_cryptolocker

    • Size

      27KB

    • MD5

      e05f2216dd2d2a8a5b8dbdb597dc8c69

    • SHA1

      129b80796489ceebd076b5052f4a5f13d5fb74fb

    • SHA256

      302fdcbb767cb53ad02fa626df3d8288297de19f35cf1302287a9aa1ae919935

    • SHA512

      4035dbc5c5c999987c135027b7ca9d293becfade9f75a25b933757601858fe8f2ab78aebef41fe6876e48ff8db2b4caefcaba438aafb77af6f244267a7fc0930

    • SSDEEP

      384:qxOZzyjOnqGAs+8ULueO4NdE8tOOtEvwDpjqIGRYK1sGGYkxlmwk:q0ZziOWwULueOSdE8tOOtEvwDpjeoA

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks