Overview

overview

10

Static

static

10

2024-04-16...er.exe

windows7-x64

9

2024-04-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-16_a0e8cd610507b1c8bc4d5b37f89ca441_cryptolocker

  • Size

    82KB

  • Sample

    240416-t4fhyage9v

  • MD5

    a0e8cd610507b1c8bc4d5b37f89ca441

  • SHA1

    74af901e1c02a61fdc72b5a290ebefbb397d8663

  • SHA256

    37507163a66f5751a4ae5f27bf58a2174557e40dc77a1591ad7deee6060abcc0

  • SHA512

    af53aff84820a07bc7efc335b5f144112f10228ba7ec8996200e62444e14e6ab581bfb3f7d8ca0853294afc65521c0b3fc232e6a2a7a97cf5f64ce5f2234f7a2

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrMS:TCjsIOtEvwDpj5HE/OUHnSMn

Score
10/10

Malware Config

Targets

    • Target

      2024-04-16_a0e8cd610507b1c8bc4d5b37f89ca441_cryptolocker

    • Size

      82KB

    • MD5

      a0e8cd610507b1c8bc4d5b37f89ca441

    • SHA1

      74af901e1c02a61fdc72b5a290ebefbb397d8663

    • SHA256

      37507163a66f5751a4ae5f27bf58a2174557e40dc77a1591ad7deee6060abcc0

    • SHA512

      af53aff84820a07bc7efc335b5f144112f10228ba7ec8996200e62444e14e6ab581bfb3f7d8ca0853294afc65521c0b3fc232e6a2a7a97cf5f64ce5f2234f7a2

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrMS:TCjsIOtEvwDpj5HE/OUHnSMn

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks