Overview

overview

10

Static

static

10

2024-04-25...er.exe

windows7-x64

9

2024-04-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-25_2eb8cabfb28d0ea1d3cd25c3583e0c48_cryptolocker

  • Size

    62KB

  • Sample

    240425-y51byseb7y

  • MD5

    2eb8cabfb28d0ea1d3cd25c3583e0c48

  • SHA1

    5f476f86a4c86f1df194533b40744afbf45411a1

  • SHA256

    9200d4f718d2a2f62104aa80e5fc4cc139815998581728ffaf961e3ffd0976df

  • SHA512

    431794d01537eda31e7e264b34780b42fb304307a5b66cc89af72e59bb1e72e6b60bada951bf519a35c9777c8da1882393bac27829b712fb5ec3cdd62044adda

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsivF:BbdDmjr+OtEvwDpjM80

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_2eb8cabfb28d0ea1d3cd25c3583e0c48_cryptolocker

    • Size

      62KB

    • MD5

      2eb8cabfb28d0ea1d3cd25c3583e0c48

    • SHA1

      5f476f86a4c86f1df194533b40744afbf45411a1

    • SHA256

      9200d4f718d2a2f62104aa80e5fc4cc139815998581728ffaf961e3ffd0976df

    • SHA512

      431794d01537eda31e7e264b34780b42fb304307a5b66cc89af72e59bb1e72e6b60bada951bf519a35c9777c8da1882393bac27829b712fb5ec3cdd62044adda

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsivF:BbdDmjr+OtEvwDpjM80

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks