Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_0adea8ac326f571649bd9e246e47e177_cryptolocker

  • Size

    31KB

  • Sample

    240428-ssprssba4t

  • MD5

    0adea8ac326f571649bd9e246e47e177

  • SHA1

    80c8f2f722766e1972c1c9ef759cd23d222d8685

  • SHA256

    44135731c1706d4a349cd14c1fcd1bd7949079d463e69fed2d5c75929cb11608

  • SHA512

    9f03ae39a776a587a5edd79fbc343c8709b1bf1098dbef1a121f3052b019be1a39960ac6b704dc4f426a99fb22380f2eff7e2f3b331f073954fc68ea6212c139

  • SSDEEP

    384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGSp:bG74zYcgT/Ekd0ryfjP

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_0adea8ac326f571649bd9e246e47e177_cryptolocker

    • Size

      31KB

    • MD5

      0adea8ac326f571649bd9e246e47e177

    • SHA1

      80c8f2f722766e1972c1c9ef759cd23d222d8685

    • SHA256

      44135731c1706d4a349cd14c1fcd1bd7949079d463e69fed2d5c75929cb11608

    • SHA512

      9f03ae39a776a587a5edd79fbc343c8709b1bf1098dbef1a121f3052b019be1a39960ac6b704dc4f426a99fb22380f2eff7e2f3b331f073954fc68ea6212c139

    • SSDEEP

      384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGSp:bG74zYcgT/Ekd0ryfjP

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks