Overview

overview

10

Static

static

10

2024-04-20...er.exe

windows7-x64

9

2024-04-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-20_91640a9aad847922b4480aa9b76751be_cryptolocker

  • Size

    49KB

  • Sample

    240420-1ep5eaae74

  • MD5

    91640a9aad847922b4480aa9b76751be

  • SHA1

    1ab3cf050d199614e88512599b0bb5e986499392

  • SHA256

    12fa2a56dbb9edb88415070b4b2a592d1f15641c718c64306a9b751b55fe63f4

  • SHA512

    6c711614c25de391697ae7d26b96b002a4463909b774dff01ec8b87839f6ac65421d13eba16e0c15e004ad6d2ed5e981ccdb2bfd8d96a79d9d6db739a94a9a5c

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moc1:qmbhXDmjr5MOtEvwDpj5cDtKkQZQQ

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_91640a9aad847922b4480aa9b76751be_cryptolocker

    • Size

      49KB

    • MD5

      91640a9aad847922b4480aa9b76751be

    • SHA1

      1ab3cf050d199614e88512599b0bb5e986499392

    • SHA256

      12fa2a56dbb9edb88415070b4b2a592d1f15641c718c64306a9b751b55fe63f4

    • SHA512

      6c711614c25de391697ae7d26b96b002a4463909b774dff01ec8b87839f6ac65421d13eba16e0c15e004ad6d2ed5e981ccdb2bfd8d96a79d9d6db739a94a9a5c

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moc1:qmbhXDmjr5MOtEvwDpj5cDtKkQZQQ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks