Overview

overview

10

Static

static

10

2024-04-29...er.exe

windows7-x64

9

2024-04-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-29_727eeb85c7474995c05673e5ffbf3dae_cryptolocker

  • Size

    34KB

  • Sample

    240429-fmadpsba89

  • MD5

    727eeb85c7474995c05673e5ffbf3dae

  • SHA1

    0b53de8ef3bbe64890e553d208c27802cd76ef2a

  • SHA256

    d6711d8694c911730ffbd0e43ce7e8ad16de2736c32f164c89e27e8e16e9c9e5

  • SHA512

    1487e92b3a19c7d263f3917edca6fd17ea9d4d06f33355602dc2602b36b96b2e636ac070d1c74ac53a9262f24317de4be4f7eb0885e0fa5c5405b0f5b12ba94a

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9gxrOn:bAvJCYOOvbRPDEgXRcuM9gxin

Score
10/10

Malware Config

Targets

    • Target

      2024-04-29_727eeb85c7474995c05673e5ffbf3dae_cryptolocker

    • Size

      34KB

    • MD5

      727eeb85c7474995c05673e5ffbf3dae

    • SHA1

      0b53de8ef3bbe64890e553d208c27802cd76ef2a

    • SHA256

      d6711d8694c911730ffbd0e43ce7e8ad16de2736c32f164c89e27e8e16e9c9e5

    • SHA512

      1487e92b3a19c7d263f3917edca6fd17ea9d4d06f33355602dc2602b36b96b2e636ac070d1c74ac53a9262f24317de4be4f7eb0885e0fa5c5405b0f5b12ba94a

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9gxrOn:bAvJCYOOvbRPDEgXRcuM9gxin

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks