Overview

overview

10

Static

static

10

2024-04-25...er.exe

windows7-x64

9

2024-04-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-25_1e95ccb39ff6880cb3def2437f6cb3fc_cryptolocker

  • Size

    95KB

  • Sample

    240425-d3nj6aee46

  • MD5

    1e95ccb39ff6880cb3def2437f6cb3fc

  • SHA1

    0daa6e20711c21e1a897de25724d4f10acc2986c

  • SHA256

    64948b020635cc0d74463211f01508f03f554d35edab6e1556ff3b0f8b29c376

  • SHA512

    6591f8c30cc17333a08c39386be3d716dc0d8ce12f2fb6376b54085e4ef4f1b2a3609b6fee2a1af58d66e676d52682cccc86fd7280e20e6e9a1739785809d876

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMg2:V6a+pOtEvwDpjtzy

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_1e95ccb39ff6880cb3def2437f6cb3fc_cryptolocker

    • Size

      95KB

    • MD5

      1e95ccb39ff6880cb3def2437f6cb3fc

    • SHA1

      0daa6e20711c21e1a897de25724d4f10acc2986c

    • SHA256

      64948b020635cc0d74463211f01508f03f554d35edab6e1556ff3b0f8b29c376

    • SHA512

      6591f8c30cc17333a08c39386be3d716dc0d8ce12f2fb6376b54085e4ef4f1b2a3609b6fee2a1af58d66e676d52682cccc86fd7280e20e6e9a1739785809d876

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMg2:V6a+pOtEvwDpjtzy

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks