Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-09_33c43e40a8a81b11723a54a30389de42_cryptolocker

  • Size

    34KB

  • Sample

    240409-ea6qpsde75

  • MD5

    33c43e40a8a81b11723a54a30389de42

  • SHA1

    30f97a5e1cb468d3d9c842443c71001775d4854a

  • SHA256

    63cd729dc3c0036068ef075b49d01e2a528db53d5c0f68a7772b5bcab9a6b82b

  • SHA512

    f20d8a3d311d40dec3540238a2e7ed984402007ec7aae20865f70befb6af9f3df426de31bbc71a728ff4abb7cd6183c15bf5889570e4f8407d4a0b0b6a45c57e

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qj:btB9g/WItCSsAGjX7r3BTj

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_33c43e40a8a81b11723a54a30389de42_cryptolocker

    • Size

      34KB

    • MD5

      33c43e40a8a81b11723a54a30389de42

    • SHA1

      30f97a5e1cb468d3d9c842443c71001775d4854a

    • SHA256

      63cd729dc3c0036068ef075b49d01e2a528db53d5c0f68a7772b5bcab9a6b82b

    • SHA512

      f20d8a3d311d40dec3540238a2e7ed984402007ec7aae20865f70befb6af9f3df426de31bbc71a728ff4abb7cd6183c15bf5889570e4f8407d4a0b0b6a45c57e

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qj:btB9g/WItCSsAGjX7r3BTj

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks