Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_04aacd6aac3195729474912f5a2cd705_cryptolocker

  • Size

    64KB

  • Sample

    240428-f3g4gsgh94

  • MD5

    04aacd6aac3195729474912f5a2cd705

  • SHA1

    61c0051e68c7cd49d9685b568910475553a6e564

  • SHA256

    318652fb729cfaf358ac4f8fb821c04b0057c14abece182475a15a8f1f947b90

  • SHA512

    9d1bb2bb3dd99f805420e734d9ff5587210af99820473b74f0cfe331146e3ed0554a018c302a09c87edad4b986fb7ad457763a3e18f77493ec6613db6f023881

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdwq:TCjsIOtEvwDpj5HE/OUHnSMYG

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_04aacd6aac3195729474912f5a2cd705_cryptolocker

    • Size

      64KB

    • MD5

      04aacd6aac3195729474912f5a2cd705

    • SHA1

      61c0051e68c7cd49d9685b568910475553a6e564

    • SHA256

      318652fb729cfaf358ac4f8fb821c04b0057c14abece182475a15a8f1f947b90

    • SHA512

      9d1bb2bb3dd99f805420e734d9ff5587210af99820473b74f0cfe331146e3ed0554a018c302a09c87edad4b986fb7ad457763a3e18f77493ec6613db6f023881

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdwq:TCjsIOtEvwDpj5HE/OUHnSMYG

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks