Overview

overview

10

Static

static

10

2024-04-24...er.exe

windows7-x64

9

2024-04-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-24_acff86b7aa7438b249ed9c135803ac07_cryptolocker

  • Size

    64KB

  • Sample

    240424-wgfarsec8w

  • MD5

    acff86b7aa7438b249ed9c135803ac07

  • SHA1

    45ca424254f94b0ab2b10d599fb2555c7ed4eed6

  • SHA256

    19dae53fb9fb9e008da14456d4a43c663fbe987d1ddb1b2c30560052662fafad

  • SHA512

    0bc37c9c8dd32a3e6c3c2c1deb363f8e7bb9f772d45983a050c8cbb9a2488fadaf7ff96763e8c43afe81e5759ed4e4d297b93d5b5ad1628ecd6807e7a13a1d23

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzoc:X6a+SOtEvwDpjBrO1

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_acff86b7aa7438b249ed9c135803ac07_cryptolocker

    • Size

      64KB

    • MD5

      acff86b7aa7438b249ed9c135803ac07

    • SHA1

      45ca424254f94b0ab2b10d599fb2555c7ed4eed6

    • SHA256

      19dae53fb9fb9e008da14456d4a43c663fbe987d1ddb1b2c30560052662fafad

    • SHA512

      0bc37c9c8dd32a3e6c3c2c1deb363f8e7bb9f772d45983a050c8cbb9a2488fadaf7ff96763e8c43afe81e5759ed4e4d297b93d5b5ad1628ecd6807e7a13a1d23

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzoc:X6a+SOtEvwDpjBrO1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks