Overview

overview

10

Static

static

10

2024-04-22...er.exe

windows7-x64

9

2024-04-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-22_dfc590f0ebc9a47d01a6a8beee5f1a4a_cryptolocker

  • Size

    96KB

  • Sample

    240422-teb48adb36

  • MD5

    dfc590f0ebc9a47d01a6a8beee5f1a4a

  • SHA1

    56bdf52a8a7b360de7b2e997def3a3d8c3b94e9b

  • SHA256

    529e589ea831dbba21bc872aca1895d285da8b6b4d71d3684df6957289e5edd3

  • SHA512

    e972c0f5d40b519a020cf36d18904350bb3c389614cdf7a8f489819a464cbe61c9616d6a9e461c9f675ed94f564c57a1c056e9f5977b7535c1d7cbad639431b8

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwn:V6a+pOtEvwDpjtz7

Score
10/10

Malware Config

Targets

    • Target

      2024-04-22_dfc590f0ebc9a47d01a6a8beee5f1a4a_cryptolocker

    • Size

      96KB

    • MD5

      dfc590f0ebc9a47d01a6a8beee5f1a4a

    • SHA1

      56bdf52a8a7b360de7b2e997def3a3d8c3b94e9b

    • SHA256

      529e589ea831dbba21bc872aca1895d285da8b6b4d71d3684df6957289e5edd3

    • SHA512

      e972c0f5d40b519a020cf36d18904350bb3c389614cdf7a8f489819a464cbe61c9616d6a9e461c9f675ed94f564c57a1c056e9f5977b7535c1d7cbad639431b8

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwn:V6a+pOtEvwDpjtz7

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks