Overview

overview

10

Static

static

10

2024-04-06...er.exe

windows7-x64

9

2024-04-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-06_8b0612db15b7cede59c43771b3517110_cryptolocker

  • Size

    62KB

  • Sample

    240406-fe17fsbf69

  • MD5

    8b0612db15b7cede59c43771b3517110

  • SHA1

    a2e3ed63376bc5c988720353658f75b699272c2a

  • SHA256

    084ed287046f6f6d550a1d4c2d46632902a7e37d227472219552158f03c636f7

  • SHA512

    4eec87b7cc47b237507216bf1c06e5bf7ade432ff64c4cef211d96a06c15041879431988ae9476d1f4d3bb0e8dfc07ef033a00d3585779d025ce161d7faa4619

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIS:TCjsIOtEvwDpj5HE/OUHnSMI

Score
10/10

Malware Config

Targets

    • Target

      2024-04-06_8b0612db15b7cede59c43771b3517110_cryptolocker

    • Size

      62KB

    • MD5

      8b0612db15b7cede59c43771b3517110

    • SHA1

      a2e3ed63376bc5c988720353658f75b699272c2a

    • SHA256

      084ed287046f6f6d550a1d4c2d46632902a7e37d227472219552158f03c636f7

    • SHA512

      4eec87b7cc47b237507216bf1c06e5bf7ade432ff64c4cef211d96a06c15041879431988ae9476d1f4d3bb0e8dfc07ef033a00d3585779d025ce161d7faa4619

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIS:TCjsIOtEvwDpj5HE/OUHnSMI

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks