Overview

overview

10

Static

static

10

2024-04-21...er.exe

windows7-x64

9

2024-04-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-21_1afc95043205720a1caf046e543538ce_cryptolocker

  • Size

    35KB

  • Sample

    240421-d5ttysaa23

  • MD5

    1afc95043205720a1caf046e543538ce

  • SHA1

    6771160edacd56c8f814fbb6893c7540fe890c43

  • SHA256

    c8ac1c9d7a9c2f38b835c1a6f802ec64b3dd24118b90fa2a3cae28f0de4a44aa

  • SHA512

    48047a254be8a76410d96629d969badb8bf0d0600542e25004b21147dfce44e79aba6b4481b9c945719a37012ee09a97ccef1f9dd237f6ef2c8831045d943883

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0q0:btB9g/WItCSsAGjX7r3BT0

Score
10/10

Malware Config

Targets

    • Target

      2024-04-21_1afc95043205720a1caf046e543538ce_cryptolocker

    • Size

      35KB

    • MD5

      1afc95043205720a1caf046e543538ce

    • SHA1

      6771160edacd56c8f814fbb6893c7540fe890c43

    • SHA256

      c8ac1c9d7a9c2f38b835c1a6f802ec64b3dd24118b90fa2a3cae28f0de4a44aa

    • SHA512

      48047a254be8a76410d96629d969badb8bf0d0600542e25004b21147dfce44e79aba6b4481b9c945719a37012ee09a97ccef1f9dd237f6ef2c8831045d943883

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0q0:btB9g/WItCSsAGjX7r3BT0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks