Overview

overview

10

Static

static

10

2024-04-16...er.exe

windows7-x64

9

2024-04-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-16_33ed8c2bdbb9ea7de9bb5cb85f5c7a2a_cryptolocker

  • Size

    389KB

  • Sample

    240416-x64v4aae56

  • MD5

    33ed8c2bdbb9ea7de9bb5cb85f5c7a2a

  • SHA1

    d2535250ecf83eb4648e60876c4c8267be76dd07

  • SHA256

    116803267adca157f9e04227026b4e07eef7529d4f99bc383f9e389ac4d2de04

  • SHA512

    c6276dfde3890bb35dbbf9d18311aee70b565a694de65807ebde053826452134cdb0b2fa86fff1d381c73240f214b02605f9eb9c0e7b0a001953def0cb97c692

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXC:nnOflT/ZFIjBz3xjTxynGUOUhXC

Score
10/10

Malware Config

Targets

    • Target

      2024-04-16_33ed8c2bdbb9ea7de9bb5cb85f5c7a2a_cryptolocker

    • Size

      389KB

    • MD5

      33ed8c2bdbb9ea7de9bb5cb85f5c7a2a

    • SHA1

      d2535250ecf83eb4648e60876c4c8267be76dd07

    • SHA256

      116803267adca157f9e04227026b4e07eef7529d4f99bc383f9e389ac4d2de04

    • SHA512

      c6276dfde3890bb35dbbf9d18311aee70b565a694de65807ebde053826452134cdb0b2fa86fff1d381c73240f214b02605f9eb9c0e7b0a001953def0cb97c692

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXC:nnOflT/ZFIjBz3xjTxynGUOUhXC

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks