Overview

overview

10

Static

static

10

2024-04-08...er.exe

windows7-x64

9

2024-04-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-08_00d9b9797dcda115aa56142a602de166_cryptolocker

  • Size

    44KB

  • Sample

    240409-rz4c4ahf33

  • MD5

    00d9b9797dcda115aa56142a602de166

  • SHA1

    e20520d0f13c90d8e65d1a7ea4e1fb662e5fec4f

  • SHA256

    5de85157a53937c839746d6da94bac4dc873d268308a69fb7f123ec47041cccf

  • SHA512

    3d55276c0200717776cb1c39f6abead81ec09f46efe3bf501aace1d6989729d07c9917b6081f668a7a45db0245fd58e0740447f96d8e68ac2657398da320c647

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyW:btB9g/WItCSsAGjX7e9N0hunrknljKr2

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_00d9b9797dcda115aa56142a602de166_cryptolocker

    • Size

      44KB

    • MD5

      00d9b9797dcda115aa56142a602de166

    • SHA1

      e20520d0f13c90d8e65d1a7ea4e1fb662e5fec4f

    • SHA256

      5de85157a53937c839746d6da94bac4dc873d268308a69fb7f123ec47041cccf

    • SHA512

      3d55276c0200717776cb1c39f6abead81ec09f46efe3bf501aace1d6989729d07c9917b6081f668a7a45db0245fd58e0740447f96d8e68ac2657398da320c647

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyW:btB9g/WItCSsAGjX7e9N0hunrknljKr2

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks