Overview

overview

10

Static

static

10

2024-04-17...er.exe

windows7-x64

9

2024-04-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-17_0f337840f69258ab8312bcce4e69662e_cryptolocker

  • Size

    39KB

  • Sample

    240417-d1nr5sea2t

  • MD5

    0f337840f69258ab8312bcce4e69662e

  • SHA1

    b86e3a3d3861537fa388576879921952d7c42e49

  • SHA256

    4823107ac70a6cbb7153a5a012e6aaf65f1f11581506877cae6f83f0ec7e568b

  • SHA512

    8ac1e3d1dc1bd40dfc13c947c852553a82f9bab84b8f5da12376f09997da167a197f4938fe1a6ae614fb8f5c85d1c75dd60593654a3b06b6f48129f6b16bbc2c

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/EW:btB9g/WItCSsAGjX7e9N0hunKLYZ

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_0f337840f69258ab8312bcce4e69662e_cryptolocker

    • Size

      39KB

    • MD5

      0f337840f69258ab8312bcce4e69662e

    • SHA1

      b86e3a3d3861537fa388576879921952d7c42e49

    • SHA256

      4823107ac70a6cbb7153a5a012e6aaf65f1f11581506877cae6f83f0ec7e568b

    • SHA512

      8ac1e3d1dc1bd40dfc13c947c852553a82f9bab84b8f5da12376f09997da167a197f4938fe1a6ae614fb8f5c85d1c75dd60593654a3b06b6f48129f6b16bbc2c

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/EW:btB9g/WItCSsAGjX7e9N0hunKLYZ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks