Overview

overview

10

Static

static

10

2024-04-23...er.exe

windows7-x64

9

2024-04-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-23_54a684fa9ae8de38d55b487c2c0f3575_cryptolocker

  • Size

    65KB

  • Sample

    240423-3fqtfacg89

  • MD5

    54a684fa9ae8de38d55b487c2c0f3575

  • SHA1

    34ae31bac09e8feca542001bd184ed3045423af5

  • SHA256

    d8483bba4ec098d5b7dca53243bac9a6457cdd0e7da2227fe8950905f0ffff2a

  • SHA512

    cdef592b880acae27821ddd8360fe0240e4310de5e12b296d2459ee65d9e573ba0f2829959ada7510e3ad9aa7249d163ae265a70b71c24ca26f068709b695c8e

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGy9:TCjsIOtEvwDpj5HE/OUHnSMYw

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_54a684fa9ae8de38d55b487c2c0f3575_cryptolocker

    • Size

      65KB

    • MD5

      54a684fa9ae8de38d55b487c2c0f3575

    • SHA1

      34ae31bac09e8feca542001bd184ed3045423af5

    • SHA256

      d8483bba4ec098d5b7dca53243bac9a6457cdd0e7da2227fe8950905f0ffff2a

    • SHA512

      cdef592b880acae27821ddd8360fe0240e4310de5e12b296d2459ee65d9e573ba0f2829959ada7510e3ad9aa7249d163ae265a70b71c24ca26f068709b695c8e

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGy9:TCjsIOtEvwDpj5HE/OUHnSMYw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks