Overview

overview

10

Static

static

10

2024-04-11...er.exe

windows7-x64

9

2024-04-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-11_8a31b1e3811f05e71f2b182e2a67df20_cryptolocker

  • Size

    45KB

  • Sample

    240411-galfwage3x

  • MD5

    8a31b1e3811f05e71f2b182e2a67df20

  • SHA1

    4fba42573b36ec54af5cf982287919d09617bc82

  • SHA256

    b935ee6c67187554c75d0aed6e184943e60812de93664b1e1862eafced834c10

  • SHA512

    e061ea57aa6a4cc0cae1228aee2706b1d74eef6cd93081c7afdba9f286dca5dbed281888bd29280ac974ce2c49c1af9bbfa8bc96b91547046368f50b95d66227

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPoL:P6QFElP6k+MRQMOtEvwDpjBQpVXzL

Score
10/10

Malware Config

Targets

    • Target

      2024-04-11_8a31b1e3811f05e71f2b182e2a67df20_cryptolocker

    • Size

      45KB

    • MD5

      8a31b1e3811f05e71f2b182e2a67df20

    • SHA1

      4fba42573b36ec54af5cf982287919d09617bc82

    • SHA256

      b935ee6c67187554c75d0aed6e184943e60812de93664b1e1862eafced834c10

    • SHA512

      e061ea57aa6a4cc0cae1228aee2706b1d74eef6cd93081c7afdba9f286dca5dbed281888bd29280ac974ce2c49c1af9bbfa8bc96b91547046368f50b95d66227

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPoL:P6QFElP6k+MRQMOtEvwDpjBQpVXzL

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks