Overview

overview

10

Static

static

10

2024-04-05...er.exe

windows7-x64

9

2024-04-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-05_c10655ec2da8e939bd7bc46a0f9db6af_cryptolocker

  • Size

    32KB

  • Sample

    240405-t8424ahf92

  • MD5

    c10655ec2da8e939bd7bc46a0f9db6af

  • SHA1

    a5b004f33852a5f869dde1e162b13a40571d35a0

  • SHA256

    2fb795869e31156d1435dd3b349e6beafd71f93947e4e4c16058010491100671

  • SHA512

    7f5619cafe5d80857d303ca146777ad776c14a0c518332832a8929326c2e77505c2feda6f7470eb4d0475edc8e7f49da8cebe8a77d4cb2026ba3f9838b3705f2

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5STV9Zon:bA74zYcgT/Ekd0ryfjQRSnWV9in

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_c10655ec2da8e939bd7bc46a0f9db6af_cryptolocker

    • Size

      32KB

    • MD5

      c10655ec2da8e939bd7bc46a0f9db6af

    • SHA1

      a5b004f33852a5f869dde1e162b13a40571d35a0

    • SHA256

      2fb795869e31156d1435dd3b349e6beafd71f93947e4e4c16058010491100671

    • SHA512

      7f5619cafe5d80857d303ca146777ad776c14a0c518332832a8929326c2e77505c2feda6f7470eb4d0475edc8e7f49da8cebe8a77d4cb2026ba3f9838b3705f2

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5STV9Zon:bA74zYcgT/Ekd0ryfjQRSnWV9in

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks