Overview

overview

10

Static

static

10

2024-04-06...er.exe

windows7-x64

9

2024-04-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-06_abad24182a267dfac824c7c8f807c63a_cryptolocker

  • Size

    79KB

  • Sample

    240406-erfkvaah46

  • MD5

    abad24182a267dfac824c7c8f807c63a

  • SHA1

    d448ee8c9ea2316e4c08c3b346b49093914ffb50

  • SHA256

    6fb15c4c7a2716915ace2498dad9e776d72e9c12620bc0b8f030d60fada2277e

  • SHA512

    f5a35644240c052401400d7b72680ce9c87d4fa9e67d0b98e094fb78d4465f8dda80bd5f01be199e63a38cd1b6d691dcd71bc30db1fca2ffde018db3f3f3f660

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf5:vCjsIOtEvwDpj5H9YvQd2t

Score
10/10

Malware Config

Targets

    • Target

      2024-04-06_abad24182a267dfac824c7c8f807c63a_cryptolocker

    • Size

      79KB

    • MD5

      abad24182a267dfac824c7c8f807c63a

    • SHA1

      d448ee8c9ea2316e4c08c3b346b49093914ffb50

    • SHA256

      6fb15c4c7a2716915ace2498dad9e776d72e9c12620bc0b8f030d60fada2277e

    • SHA512

      f5a35644240c052401400d7b72680ce9c87d4fa9e67d0b98e094fb78d4465f8dda80bd5f01be199e63a38cd1b6d691dcd71bc30db1fca2ffde018db3f3f3f660

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf5:vCjsIOtEvwDpj5H9YvQd2t

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks