Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-09_766b6694b3bcd41dc7c151419fbf9024_cryptolocker

  • Size

    388KB

  • Sample

    240409-ekbcjshe3v

  • MD5

    766b6694b3bcd41dc7c151419fbf9024

  • SHA1

    faa6cec751f5b0682b9636827e514e4dd0daaa36

  • SHA256

    7d4af2d26a655bdc41dcd204caea01615b7c235156168cec9f4285f8b791d10a

  • SHA512

    f964a28a6155d4617fd5e3810860508727bde60a48476625a10583ad13cac2095f67bc1e4ac5d1ff0e39313fd07c2842997b29782b4e7b6409b9df3d0b56fd38

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX3:nnOflT/ZFIjBz3xjTxynGUOUhX3

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_766b6694b3bcd41dc7c151419fbf9024_cryptolocker

    • Size

      388KB

    • MD5

      766b6694b3bcd41dc7c151419fbf9024

    • SHA1

      faa6cec751f5b0682b9636827e514e4dd0daaa36

    • SHA256

      7d4af2d26a655bdc41dcd204caea01615b7c235156168cec9f4285f8b791d10a

    • SHA512

      f964a28a6155d4617fd5e3810860508727bde60a48476625a10583ad13cac2095f67bc1e4ac5d1ff0e39313fd07c2842997b29782b4e7b6409b9df3d0b56fd38

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX3:nnOflT/ZFIjBz3xjTxynGUOUhX3

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks