Overview

overview

10

Static

static

10

2024-04-26...er.exe

windows7-x64

9

2024-04-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-26_c697af3e8ed4b26337eded971a7aef2a_cryptolocker

  • Size

    39KB

  • Sample

    240426-jjnnpsbh8w

  • MD5

    c697af3e8ed4b26337eded971a7aef2a

  • SHA1

    fa1d63ec7c2e68cb7f9e3383eb304ceb47aedc9d

  • SHA256

    6ca2e0bb01a55a544a2a29cbbd191b881cd0d51cb83a3fc72cd9b8cd16cba962

  • SHA512

    72913f9f6b50f8f3039dd764894de6006d8f76e12cb137659ce19b88ef4f17a918ae1f1299632a5f5ee2745e374cc52367f660ce260ef106c0a199d4cff932a2

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDwX:ZzFbxmLPWQMOtEvwDpjLeJAsKcg

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_c697af3e8ed4b26337eded971a7aef2a_cryptolocker

    • Size

      39KB

    • MD5

      c697af3e8ed4b26337eded971a7aef2a

    • SHA1

      fa1d63ec7c2e68cb7f9e3383eb304ceb47aedc9d

    • SHA256

      6ca2e0bb01a55a544a2a29cbbd191b881cd0d51cb83a3fc72cd9b8cd16cba962

    • SHA512

      72913f9f6b50f8f3039dd764894de6006d8f76e12cb137659ce19b88ef4f17a918ae1f1299632a5f5ee2745e374cc52367f660ce260ef106c0a199d4cff932a2

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDwX:ZzFbxmLPWQMOtEvwDpjLeJAsKcg

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks