Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-09_ca2f474a38e4a8e451d7a063a96038db_cryptolocker

  • Size

    99KB

  • Sample

    240409-a5435sgh72

  • MD5

    ca2f474a38e4a8e451d7a063a96038db

  • SHA1

    4a48f471e913e6f53b79d3707de545240a974c85

  • SHA256

    3b01dd0d819ad2d584e492b76be54762012e5333ae70c2f891cb0f0dae441676

  • SHA512

    0040fd38fe1ef68c3e5c22aaee379cae4960fc4ceb4d83418c4d500f6d08c94a3bb7921ec9594dba2ce8b5bcd2745ca0c190075dc30879141835aa20f924e80c

  • SSDEEP

    1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwpG:26a+2OtEvwDpjtzv

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_ca2f474a38e4a8e451d7a063a96038db_cryptolocker

    • Size

      99KB

    • MD5

      ca2f474a38e4a8e451d7a063a96038db

    • SHA1

      4a48f471e913e6f53b79d3707de545240a974c85

    • SHA256

      3b01dd0d819ad2d584e492b76be54762012e5333ae70c2f891cb0f0dae441676

    • SHA512

      0040fd38fe1ef68c3e5c22aaee379cae4960fc4ceb4d83418c4d500f6d08c94a3bb7921ec9594dba2ce8b5bcd2745ca0c190075dc30879141835aa20f924e80c

    • SSDEEP

      1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwpG:26a+2OtEvwDpjtzv

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks