Overview

overview

10

Static

static

10

2024-04-05...er.exe

windows7-x64

9

2024-04-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-05_4dcd10213e8d93351c6b627679cc098f_cryptolocker

  • Size

    48KB

  • Sample

    240405-d82c7sbh37

  • MD5

    4dcd10213e8d93351c6b627679cc098f

  • SHA1

    f8c860c5d5a958d0d05e3af9d703511541efb16d

  • SHA256

    e1e6812104e3dae9371c95772466818e12e18a718b0feec5befd64ed2839b8b2

  • SHA512

    32ba452c64e917944767aaf5aedd17671261210f6605fad9f04423fbaf30f6c7c008f2562547f864b9dce0826421725ea46369ed8e68ed047a85d3cbcbcfe904

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6uMcB:BbdDmjr+OtEvwDpjM1

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_4dcd10213e8d93351c6b627679cc098f_cryptolocker

    • Size

      48KB

    • MD5

      4dcd10213e8d93351c6b627679cc098f

    • SHA1

      f8c860c5d5a958d0d05e3af9d703511541efb16d

    • SHA256

      e1e6812104e3dae9371c95772466818e12e18a718b0feec5befd64ed2839b8b2

    • SHA512

      32ba452c64e917944767aaf5aedd17671261210f6605fad9f04423fbaf30f6c7c008f2562547f864b9dce0826421725ea46369ed8e68ed047a85d3cbcbcfe904

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6uMcB:BbdDmjr+OtEvwDpjM1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks