Overview

overview

10

Static

static

10

2024-04-16...er.exe

windows7-x64

9

2024-04-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-16_5d41bcf8f8f18c7e5072af2e9147a3eb_cryptolocker

  • Size

    69KB

  • Sample

    240416-fdw64shf97

  • MD5

    5d41bcf8f8f18c7e5072af2e9147a3eb

  • SHA1

    5457143ab4938bd1c7b981000ae18ea561d3420e

  • SHA256

    81629208fa0425ac4e58ae607b749e6738d42d33e3e76bf85399e8937a31ada4

  • SHA512

    968040f8283d3ab227d099bb89ab4c16674192ab7c0e073c9538aa1c6633236fe1e5ed39e9fe0b63cc28d570e922a9461933fb286120a7991992c7897be499d5

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU501:DW60sllyWOtEvwDpjwF85S

Score
10/10

Malware Config

Targets

    • Target

      2024-04-16_5d41bcf8f8f18c7e5072af2e9147a3eb_cryptolocker

    • Size

      69KB

    • MD5

      5d41bcf8f8f18c7e5072af2e9147a3eb

    • SHA1

      5457143ab4938bd1c7b981000ae18ea561d3420e

    • SHA256

      81629208fa0425ac4e58ae607b749e6738d42d33e3e76bf85399e8937a31ada4

    • SHA512

      968040f8283d3ab227d099bb89ab4c16674192ab7c0e073c9538aa1c6633236fe1e5ed39e9fe0b63cc28d570e922a9461933fb286120a7991992c7897be499d5

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU501:DW60sllyWOtEvwDpjwF85S

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks