Overview

overview

10

Static

static

10

2024-04-19...er.exe

windows7-x64

9

2024-04-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-19_0772670535e39d97afbcd57acac24c51_cryptolocker

  • Size

    62KB

  • Sample

    240419-rrnmnsfe3y

  • MD5

    0772670535e39d97afbcd57acac24c51

  • SHA1

    11339d90d760ebb5d1d8fcc67e9f8d7d0a3f8cab

  • SHA256

    4511055b23ee6cd17dc790fc35b9509d65144e5b29ecb24db0bd08a761cfbaa5

  • SHA512

    6edc05694ce3d0cfabf3c30b45dab836a02c74cc92ea3d3ad0da2ac9db53309439d03e9ec0adce3f7a66526dca0ab129ba094d77ef8d3af67725d50329013d58

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiq:BbdDmjr+OtEvwDpjM8v

Score
10/10

Malware Config

Targets

    • Target

      2024-04-19_0772670535e39d97afbcd57acac24c51_cryptolocker

    • Size

      62KB

    • MD5

      0772670535e39d97afbcd57acac24c51

    • SHA1

      11339d90d760ebb5d1d8fcc67e9f8d7d0a3f8cab

    • SHA256

      4511055b23ee6cd17dc790fc35b9509d65144e5b29ecb24db0bd08a761cfbaa5

    • SHA512

      6edc05694ce3d0cfabf3c30b45dab836a02c74cc92ea3d3ad0da2ac9db53309439d03e9ec0adce3f7a66526dca0ab129ba094d77ef8d3af67725d50329013d58

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiq:BbdDmjr+OtEvwDpjM8v

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks