Overview

overview

10

Static

static

10

2024-04-06...er.exe

windows7-x64

9

2024-04-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-06_4aa5bc9663ad4a78356bc4c7d560979a_cryptolocker

  • Size

    63KB

  • Sample

    240406-lk12jaga59

  • MD5

    4aa5bc9663ad4a78356bc4c7d560979a

  • SHA1

    741daf5475b2f071e4fc606a385a892be092b58d

  • SHA256

    ee5f5c74359dbce567929b649fc36ffe45eb4b7f53df2f3be655adf4bdfe7271

  • SHA512

    d316c8ee0a6b6b3c656e372816fc5d07cfa8be68af03628622a25228b0b6c7bd0788a955939ffa68507e7d5fa6a2f8357897c46be032b6e5a0caa70a83e66fa8

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzowe:X6a+SOtEvwDpjBrOa

Score
10/10

Malware Config

Targets

    • Target

      2024-04-06_4aa5bc9663ad4a78356bc4c7d560979a_cryptolocker

    • Size

      63KB

    • MD5

      4aa5bc9663ad4a78356bc4c7d560979a

    • SHA1

      741daf5475b2f071e4fc606a385a892be092b58d

    • SHA256

      ee5f5c74359dbce567929b649fc36ffe45eb4b7f53df2f3be655adf4bdfe7271

    • SHA512

      d316c8ee0a6b6b3c656e372816fc5d07cfa8be68af03628622a25228b0b6c7bd0788a955939ffa68507e7d5fa6a2f8357897c46be032b6e5a0caa70a83e66fa8

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzowe:X6a+SOtEvwDpjBrOa

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks