Overview

overview

10

Static

static

10

2024-04-24...er.exe

windows7-x64

9

2024-04-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-24_9eae630f7ec576f302326d4cce556d91_cryptolocker

  • Size

    42KB

  • Sample

    240424-rdl7pabc4z

  • MD5

    9eae630f7ec576f302326d4cce556d91

  • SHA1

    b7f284abe6c9f79d223e00b3f01e45678a2e0ba5

  • SHA256

    95a065da6a91777f0086a3d097e5b9bb14d82f6b935d7b94cb3c280f41bc23b7

  • SHA512

    83e9893ce3b80350d14e2d964bcc6eab98eac578ed6c7bd72e9339258e6423221618680de161a67b070d791f59126686efa93a43ee7df0bd826807dbf75d6383

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8uYo0nrlwfjDUI:bm74zYcgT/Ek70ryfjN

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_9eae630f7ec576f302326d4cce556d91_cryptolocker

    • Size

      42KB

    • MD5

      9eae630f7ec576f302326d4cce556d91

    • SHA1

      b7f284abe6c9f79d223e00b3f01e45678a2e0ba5

    • SHA256

      95a065da6a91777f0086a3d097e5b9bb14d82f6b935d7b94cb3c280f41bc23b7

    • SHA512

      83e9893ce3b80350d14e2d964bcc6eab98eac578ed6c7bd72e9339258e6423221618680de161a67b070d791f59126686efa93a43ee7df0bd826807dbf75d6383

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8uYo0nrlwfjDUI:bm74zYcgT/Ek70ryfjN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks