Overview

overview

10

Static

static

10

2024-04-25...er.exe

windows7-x64

9

2024-04-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-25_58c067b203f8273e8e6ed1d744f6d47a_cryptolocker

  • Size

    35KB

  • Sample

    240425-xtp66sdf41

  • MD5

    58c067b203f8273e8e6ed1d744f6d47a

  • SHA1

    d8f7a1824101d04b970a990ef3ff48a6fd029e03

  • SHA256

    af485c98faafc2d092f3d3edec7cce7389668af054bcc88807c0fecf7e161be9

  • SHA512

    0d509882d22247e8fe5e08567d2c383280a4e9009028ed80854c6d4e88dc052c5cd488ee22d29d46987b058c6472e49d42bf75d54975eda3700f448ff1a75033

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3V6uVSCc:b7o/2n1TCraU6GD1a4Xt9bRUlV49

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_58c067b203f8273e8e6ed1d744f6d47a_cryptolocker

    • Size

      35KB

    • MD5

      58c067b203f8273e8e6ed1d744f6d47a

    • SHA1

      d8f7a1824101d04b970a990ef3ff48a6fd029e03

    • SHA256

      af485c98faafc2d092f3d3edec7cce7389668af054bcc88807c0fecf7e161be9

    • SHA512

      0d509882d22247e8fe5e08567d2c383280a4e9009028ed80854c6d4e88dc052c5cd488ee22d29d46987b058c6472e49d42bf75d54975eda3700f448ff1a75033

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3V6uVSCc:b7o/2n1TCraU6GD1a4Xt9bRUlV49

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks