Overview

overview

10

Static

static

10

2024-04-16...er.exe

windows7-x64

9

2024-04-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-16_49b33d961590717e695ef6966da920e5_cryptolocker

  • Size

    39KB

  • Sample

    240416-jdnrhscd72

  • MD5

    49b33d961590717e695ef6966da920e5

  • SHA1

    08d1c34803352ac2061258cf85103aa8ad8c9efc

  • SHA256

    1e43c502b5fd8b2825fb74e06bc28abcdb5239e38607ea982f0d0111ba1ab064

  • SHA512

    39f29a24df562f48a00f3ef4677ed01fbe59545f0e078181becc5e5ed3f03292ba9324eef7c285cc58b4696c2d90eb0ed6f8c2e5db9d041db0396eef29f799fc

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/EK:btB9g/WItCSsAGjX7e9N0hunKLYt

Score
10/10

Malware Config

Targets

    • Target

      2024-04-16_49b33d961590717e695ef6966da920e5_cryptolocker

    • Size

      39KB

    • MD5

      49b33d961590717e695ef6966da920e5

    • SHA1

      08d1c34803352ac2061258cf85103aa8ad8c9efc

    • SHA256

      1e43c502b5fd8b2825fb74e06bc28abcdb5239e38607ea982f0d0111ba1ab064

    • SHA512

      39f29a24df562f48a00f3ef4677ed01fbe59545f0e078181becc5e5ed3f03292ba9324eef7c285cc58b4696c2d90eb0ed6f8c2e5db9d041db0396eef29f799fc

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/EK:btB9g/WItCSsAGjX7e9N0hunKLYt

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks