Overview

overview

10

Static

static

10

2024-04-27...er.exe

windows7-x64

9

2024-04-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_491c97600f900e7e31feb4e0ea4ded3a_cryptolocker

  • Size

    41KB

  • Sample

    240427-kbhm6afd2y

  • MD5

    491c97600f900e7e31feb4e0ea4ded3a

  • SHA1

    39844c6663fa4887acb5d53f2c37b9cf356c3862

  • SHA256

    39ee04884944d3df184a6ad6d26863084dce9145571d89956317882519e7bb08

  • SHA512

    24a45dbe792e9ea3c2d9e3b72add60726bb62421a4dcb8e884bc13fbf435bac7af92c77a98c7c5cb5c72a2107f95e332a4c335f9f3fa640d91e940ed5a952016

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA2:bCDOw9aMDooc+vA2

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_491c97600f900e7e31feb4e0ea4ded3a_cryptolocker

    • Size

      41KB

    • MD5

      491c97600f900e7e31feb4e0ea4ded3a

    • SHA1

      39844c6663fa4887acb5d53f2c37b9cf356c3862

    • SHA256

      39ee04884944d3df184a6ad6d26863084dce9145571d89956317882519e7bb08

    • SHA512

      24a45dbe792e9ea3c2d9e3b72add60726bb62421a4dcb8e884bc13fbf435bac7af92c77a98c7c5cb5c72a2107f95e332a4c335f9f3fa640d91e940ed5a952016

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA2:bCDOw9aMDooc+vA2

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks