Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-28_f062832d9ebfd386dbb078afa226f1dd_cryptolocker

  • Size

    62KB

  • Sample

    240428-fkmagsgg7y

  • MD5

    f062832d9ebfd386dbb078afa226f1dd

  • SHA1

    cfa0589a552217cd94bbe58cb595f2b5ab37e3ea

  • SHA256

    ca222cb9ac4ef52efdbef442198d16c266cb4e937c44184ad1bc319e758bc9fe

  • SHA512

    b5b86eaaa24e1dda006fad507c185c06c589da416bae8c28b41557d89ed49284c8cdd0b7272e378f2f1cd644f46d993901b41d67e2c60e7bbedb40233cd6374d

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiEz:BbdDmjr+OtEvwDpjM8Z

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_f062832d9ebfd386dbb078afa226f1dd_cryptolocker

    • Size

      62KB

    • MD5

      f062832d9ebfd386dbb078afa226f1dd

    • SHA1

      cfa0589a552217cd94bbe58cb595f2b5ab37e3ea

    • SHA256

      ca222cb9ac4ef52efdbef442198d16c266cb4e937c44184ad1bc319e758bc9fe

    • SHA512

      b5b86eaaa24e1dda006fad507c185c06c589da416bae8c28b41557d89ed49284c8cdd0b7272e378f2f1cd644f46d993901b41d67e2c60e7bbedb40233cd6374d

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiEz:BbdDmjr+OtEvwDpjM8Z

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks