Overview

overview

10

Static

static

10

2024-04-18...er.exe

windows7-x64

9

2024-04-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-18_ddf8cea74421cb0392ac5e54b749308a_cryptolocker

  • Size

    49KB

  • Sample

    240418-jyx6pafe88

  • MD5

    ddf8cea74421cb0392ac5e54b749308a

  • SHA1

    1bfa189e610c21fa799292c70628392ff79e3306

  • SHA256

    7e36d680adfdacc68ea5f70869ab104f22a56451334397e96e670520e9783292

  • SHA512

    b980a9226c55a0b3294397e20320a118fa7f0adefa2b64707c4868d8cb02f58cf4433c2b39aa300d684937d94e6e33e06e2f0c106bfab742ffbb79d8943e10ef

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moch:qmbhXDmjr5MOtEvwDpj5cDtKkQZQc

Score
10/10

Malware Config

Targets

    • Target

      2024-04-18_ddf8cea74421cb0392ac5e54b749308a_cryptolocker

    • Size

      49KB

    • MD5

      ddf8cea74421cb0392ac5e54b749308a

    • SHA1

      1bfa189e610c21fa799292c70628392ff79e3306

    • SHA256

      7e36d680adfdacc68ea5f70869ab104f22a56451334397e96e670520e9783292

    • SHA512

      b980a9226c55a0b3294397e20320a118fa7f0adefa2b64707c4868d8cb02f58cf4433c2b39aa300d684937d94e6e33e06e2f0c106bfab742ffbb79d8943e10ef

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moch:qmbhXDmjr5MOtEvwDpj5cDtKkQZQc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks