Overview

overview

10

Static

static

10

2024-04-23...er.exe

windows7-x64

9

2024-04-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-23_f3815833bff53e7711e44da124c09409_cryptolocker

  • Size

    47KB

  • Sample

    240423-zxpqxsbh92

  • MD5

    f3815833bff53e7711e44da124c09409

  • SHA1

    c71d5e06079b1e4b47370fcc49506d3bb9997158

  • SHA256

    873af0fbe8d8c15f84ddfc6f1192e77ae231efcfc63e37f84a2296384be9d1c0

  • SHA512

    80f9b2b30a792b24e56ba8d27a11e42b6831adec9a515d91dd5bca3ffe942c7b5ef8244d0b2ba3bfbe6eed2907a4f833d409a9860924536f8e79d449131a3a39

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoAC:qmbhXDmjr5MOtEvwDpj5cDtKkQZQv

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_f3815833bff53e7711e44da124c09409_cryptolocker

    • Size

      47KB

    • MD5

      f3815833bff53e7711e44da124c09409

    • SHA1

      c71d5e06079b1e4b47370fcc49506d3bb9997158

    • SHA256

      873af0fbe8d8c15f84ddfc6f1192e77ae231efcfc63e37f84a2296384be9d1c0

    • SHA512

      80f9b2b30a792b24e56ba8d27a11e42b6831adec9a515d91dd5bca3ffe942c7b5ef8244d0b2ba3bfbe6eed2907a4f833d409a9860924536f8e79d449131a3a39

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoAC:qmbhXDmjr5MOtEvwDpj5cDtKkQZQv

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks