Overview

overview

10

Static

static

10

2024-04-27...er.exe

windows7-x64

9

2024-04-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-27_f6c3fbd4b69059cbc02c3b1388035c69_cryptolocker

  • Size

    54KB

  • Sample

    240427-hlem5sdh9v

  • MD5

    f6c3fbd4b69059cbc02c3b1388035c69

  • SHA1

    1939419693c68ff4b428af589c972dcd6fc4ab1e

  • SHA256

    5466fdb881b069e13dcd9806e5e9a7b5d6c1814e517827e6e72fc870d71c8354

  • SHA512

    533fade8b2e404fbf7251e910e350250f1de1ea8608dae59f453cd3e5cf613f275536f1878922011f82d979b575b34317b79f309ccc970f2ab2cb49f969c1e49

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6Impyb:BbdDmjr+OtEvwDpjMo

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_f6c3fbd4b69059cbc02c3b1388035c69_cryptolocker

    • Size

      54KB

    • MD5

      f6c3fbd4b69059cbc02c3b1388035c69

    • SHA1

      1939419693c68ff4b428af589c972dcd6fc4ab1e

    • SHA256

      5466fdb881b069e13dcd9806e5e9a7b5d6c1814e517827e6e72fc870d71c8354

    • SHA512

      533fade8b2e404fbf7251e910e350250f1de1ea8608dae59f453cd3e5cf613f275536f1878922011f82d979b575b34317b79f309ccc970f2ab2cb49f969c1e49

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6Impyb:BbdDmjr+OtEvwDpjMo

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks