Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-09_42c0e442f7eb212a4ce21ea768d677a2_cryptolocker

  • Size

    63KB

  • Sample

    240409-qs3mjsgc22

  • MD5

    42c0e442f7eb212a4ce21ea768d677a2

  • SHA1

    50527e43da806a612dae0326ebe0ef73c36f0156

  • SHA256

    a79ce5b2d3d17ece41a2620575b47ef964776a633f6fa22127fec428ff106e5c

  • SHA512

    e769dfc887985c151b08a70f8d25b429ac1d6fe0b9b3b4bc3bf5aec46af101ecd7f0924d2932df6c15e362730c652fa099e943167da8b2a1841c802bfcab163a

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTI8:TCjsIOtEvwDpj5HE/OUHnSM+

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_42c0e442f7eb212a4ce21ea768d677a2_cryptolocker

    • Size

      63KB

    • MD5

      42c0e442f7eb212a4ce21ea768d677a2

    • SHA1

      50527e43da806a612dae0326ebe0ef73c36f0156

    • SHA256

      a79ce5b2d3d17ece41a2620575b47ef964776a633f6fa22127fec428ff106e5c

    • SHA512

      e769dfc887985c151b08a70f8d25b429ac1d6fe0b9b3b4bc3bf5aec46af101ecd7f0924d2932df6c15e362730c652fa099e943167da8b2a1841c802bfcab163a

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTI8:TCjsIOtEvwDpj5HE/OUHnSM+

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks