Overview

overview

10

Static

static

10

2024-04-27...er.exe

windows7-x64

9

2024-04-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_cedd4166f731ba98f69e48cf14477fa1_cryptolocker

  • Size

    60KB

  • Sample

    240427-fw89dscf3z

  • MD5

    cedd4166f731ba98f69e48cf14477fa1

  • SHA1

    331fd4d37296dd86ce502b4cd50cd04d275b4f7e

  • SHA256

    9c0e2f17469c885c99d41ce5cad875133f439e8605b6595fe2a4ed2c4442c98f

  • SHA512

    0f3c16b00e12ea9e1f484747d3d635348388ecb8df25e4b77e7c7d21055e7f75d1507aea7e7eacc5c2097425c10ffc2000648e2b0da3d4ff925bc86418c6ed2f

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbtCK:V6a+pOtEvwDpjv0

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_cedd4166f731ba98f69e48cf14477fa1_cryptolocker

    • Size

      60KB

    • MD5

      cedd4166f731ba98f69e48cf14477fa1

    • SHA1

      331fd4d37296dd86ce502b4cd50cd04d275b4f7e

    • SHA256

      9c0e2f17469c885c99d41ce5cad875133f439e8605b6595fe2a4ed2c4442c98f

    • SHA512

      0f3c16b00e12ea9e1f484747d3d635348388ecb8df25e4b77e7c7d21055e7f75d1507aea7e7eacc5c2097425c10ffc2000648e2b0da3d4ff925bc86418c6ed2f

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbtCK:V6a+pOtEvwDpjv0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks