Overview

overview

10

Static

static

10

2024-04-06...er.exe

windows7-x64

9

2024-04-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-06_5065a907cc86cf753c45027aee9a267a_cryptolocker

  • Size

    127KB

  • Sample

    240406-ll3azsga77

  • MD5

    5065a907cc86cf753c45027aee9a267a

  • SHA1

    ca44755ae1016b9a500224adab5a5030535a6792

  • SHA256

    173286905888a3a9ac4a5ffbe33e956034325848db832e82ffa7d423b7c9d5b3

  • SHA512

    b605f9bd7d2610d155a1759572fd3cd325fb3bda8da5e3cf65f5e9b0f14f2d21a09690d3fc08be103bfb6b0cc70b26386c321247b767d18762cd380bc6ac767e

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpB:vCA9OtEvwDpj9

Score
10/10

Malware Config

Targets

    • Target

      2024-04-06_5065a907cc86cf753c45027aee9a267a_cryptolocker

    • Size

      127KB

    • MD5

      5065a907cc86cf753c45027aee9a267a

    • SHA1

      ca44755ae1016b9a500224adab5a5030535a6792

    • SHA256

      173286905888a3a9ac4a5ffbe33e956034325848db832e82ffa7d423b7c9d5b3

    • SHA512

      b605f9bd7d2610d155a1759572fd3cd325fb3bda8da5e3cf65f5e9b0f14f2d21a09690d3fc08be103bfb6b0cc70b26386c321247b767d18762cd380bc6ac767e

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpB:vCA9OtEvwDpj9

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks