Overview

overview

10

Static

static

10

2024-04-20...er.exe

windows7-x64

9

2024-04-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-20_6dc40b688b2a33daac42dbde66558be2_cryptolocker

  • Size

    31KB

  • Sample

    240420-ea62gafe78

  • MD5

    6dc40b688b2a33daac42dbde66558be2

  • SHA1

    0cf80d96f92818423086001fa0147db4b5fa5b97

  • SHA256

    e3bf8b8c9955b8777c9c4e03ce41fdca156cfaf079f916aeb924fd3b22cb7073

  • SHA512

    b2c8ce4ba830674c337c2242c7dec7fbedc93180e46d6dac0e7801984f1cb980056c4ab95465559b499f03105bebedfd2a9121a09c1970563e44f47622315547

  • SSDEEP

    384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTG2G:bG74zYcgT/Ekd0ryfjTG

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_6dc40b688b2a33daac42dbde66558be2_cryptolocker

    • Size

      31KB

    • MD5

      6dc40b688b2a33daac42dbde66558be2

    • SHA1

      0cf80d96f92818423086001fa0147db4b5fa5b97

    • SHA256

      e3bf8b8c9955b8777c9c4e03ce41fdca156cfaf079f916aeb924fd3b22cb7073

    • SHA512

      b2c8ce4ba830674c337c2242c7dec7fbedc93180e46d6dac0e7801984f1cb980056c4ab95465559b499f03105bebedfd2a9121a09c1970563e44f47622315547

    • SSDEEP

      384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTG2G:bG74zYcgT/Ekd0ryfjTG

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks