Overview

overview

10

Static

static

10

2024-04-24...er.exe

windows7-x64

9

2024-04-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-24_128994025a42e017ca371977047e6084_cryptolocker

  • Size

    81KB

  • Sample

    240424-e1f8qseh57

  • MD5

    128994025a42e017ca371977047e6084

  • SHA1

    2abcb56d8f5496ffe9e601a54b05640d5c7c719b

  • SHA256

    c561f80002ad136b52d172a3debc042e964f03ef64ec154034fe49a5330e2c50

  • SHA512

    11e4c9a5c7d0d7b84f2cc310254f351c211a17b0963cacf1a097531b8363ec19efe1a56a161403783c74b52e46305a38c43142af793048b518c88d17c5f78509

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrl:TCjsIOtEvwDpj5HE/OUHnSMP

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_128994025a42e017ca371977047e6084_cryptolocker

    • Size

      81KB

    • MD5

      128994025a42e017ca371977047e6084

    • SHA1

      2abcb56d8f5496ffe9e601a54b05640d5c7c719b

    • SHA256

      c561f80002ad136b52d172a3debc042e964f03ef64ec154034fe49a5330e2c50

    • SHA512

      11e4c9a5c7d0d7b84f2cc310254f351c211a17b0963cacf1a097531b8363ec19efe1a56a161403783c74b52e46305a38c43142af793048b518c88d17c5f78509

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrl:TCjsIOtEvwDpj5HE/OUHnSMP

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks