Overview

overview

10

Static

static

10

2024-04-18...er.exe

windows7-x64

9

2024-04-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-18_b0810dcf53752272fd4cbbbb0206cf31_cryptolocker

  • Size

    54KB

  • Sample

    240418-fnrpdabg96

  • MD5

    b0810dcf53752272fd4cbbbb0206cf31

  • SHA1

    c5bf3d896ef0193c832c3fc6c03d2c35185f651c

  • SHA256

    ec06e97a8e9cc8e8aa3d05cc02d62195a8c99b23bc77bfb3953354ea630126d5

  • SHA512

    0014c15be151e7245f6c75b9d62795d9f73a94004294806651cf9e245dce4ba3c52df706f26b9c8b582b99464259c9a038b56aff49e346e57caaa4a0ef20b55a

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6Impy6:BbdDmjr+OtEvwDpjMN

Score
10/10

Malware Config

Targets

    • Target

      2024-04-18_b0810dcf53752272fd4cbbbb0206cf31_cryptolocker

    • Size

      54KB

    • MD5

      b0810dcf53752272fd4cbbbb0206cf31

    • SHA1

      c5bf3d896ef0193c832c3fc6c03d2c35185f651c

    • SHA256

      ec06e97a8e9cc8e8aa3d05cc02d62195a8c99b23bc77bfb3953354ea630126d5

    • SHA512

      0014c15be151e7245f6c75b9d62795d9f73a94004294806651cf9e245dce4ba3c52df706f26b9c8b582b99464259c9a038b56aff49e346e57caaa4a0ef20b55a

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6Impy6:BbdDmjr+OtEvwDpjMN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks