Overview

overview

10

Static

static

10

2024-04-23...er.exe

windows7-x64

9

2024-04-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-23_2df5f3e6821bd138a58e6fde42e75bc6_cryptolocker

  • Size

    100KB

  • Sample

    240423-c6qcgsbg94

  • MD5

    2df5f3e6821bd138a58e6fde42e75bc6

  • SHA1

    7d6a4bc2a5bfd6de1a42a600d39387864e470635

  • SHA256

    040bb64587fd381fce62902d26c199134b81b918278b42515360bc7d6e0b6682

  • SHA512

    a13321dd2026d6a84d6b8b2084e04d289868b2c300cf0ff3a4ceeee0477f70c539c240223475fe61f2540e97693dfc184a4c818bf0e1c17cae4e79107f192bd5

  • SSDEEP

    1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWw2:26a+2OtEvwDpjtz5

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_2df5f3e6821bd138a58e6fde42e75bc6_cryptolocker

    • Size

      100KB

    • MD5

      2df5f3e6821bd138a58e6fde42e75bc6

    • SHA1

      7d6a4bc2a5bfd6de1a42a600d39387864e470635

    • SHA256

      040bb64587fd381fce62902d26c199134b81b918278b42515360bc7d6e0b6682

    • SHA512

      a13321dd2026d6a84d6b8b2084e04d289868b2c300cf0ff3a4ceeee0477f70c539c240223475fe61f2540e97693dfc184a4c818bf0e1c17cae4e79107f192bd5

    • SSDEEP

      1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWw2:26a+2OtEvwDpjtz5

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks