Overview

overview

10

Static

static

10

2024-04-19...er.exe

windows7-x64

9

2024-04-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-19_23e7f0edf49aa7dc8e068e1616607def_cryptolocker

  • Size

    49KB

  • Sample

    240419-ka4h8sdf7v

  • MD5

    23e7f0edf49aa7dc8e068e1616607def

  • SHA1

    e040356ce797f9f0077af3764a966380d30c249f

  • SHA256

    fddc922e903369fe3c30a65ae98d04d28479d2461b3cb1fc1f358821ab95b3bc

  • SHA512

    9fbc31dea369af969df735db38e83a41c2af5f6a684aa70ad02654bda38e5f5a9b4606cf28a8efbd3e70bc3e303658a0e4a027e7c1597210609f3d918c3420ef

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MocB:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ0

Score
10/10

Malware Config

Targets

    • Target

      2024-04-19_23e7f0edf49aa7dc8e068e1616607def_cryptolocker

    • Size

      49KB

    • MD5

      23e7f0edf49aa7dc8e068e1616607def

    • SHA1

      e040356ce797f9f0077af3764a966380d30c249f

    • SHA256

      fddc922e903369fe3c30a65ae98d04d28479d2461b3cb1fc1f358821ab95b3bc

    • SHA512

      9fbc31dea369af969df735db38e83a41c2af5f6a684aa70ad02654bda38e5f5a9b4606cf28a8efbd3e70bc3e303658a0e4a027e7c1597210609f3d918c3420ef

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MocB:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks