Overview

overview

10

Static

static

10

2024-04-29...er.exe

windows7-x64

9

2024-04-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-29_f54bf157b49e3583e9304be49bf6bd43_cryptolocker

  • Size

    61KB

  • Sample

    240429-ze7tsacb6w

  • MD5

    f54bf157b49e3583e9304be49bf6bd43

  • SHA1

    1d83f125cbd021d2223ef900121c2c01137e1e8d

  • SHA256

    06271f32aa8c3b5ff125efdb452f97035cd273ee99391f76439dfe6013931e0b

  • SHA512

    8d498d75db51e93389671c07f668b99c622e5f4d70dcbabcadc242addb45d0d406a0e42681df3229581a683591ca2f5353ecfbd6782e4a0ddc13ae80a1987ece

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNupA:TCjsIOtEvwDpj5HE/OUHnSMZa

Score
10/10

Malware Config

Targets

    • Target

      2024-04-29_f54bf157b49e3583e9304be49bf6bd43_cryptolocker

    • Size

      61KB

    • MD5

      f54bf157b49e3583e9304be49bf6bd43

    • SHA1

      1d83f125cbd021d2223ef900121c2c01137e1e8d

    • SHA256

      06271f32aa8c3b5ff125efdb452f97035cd273ee99391f76439dfe6013931e0b

    • SHA512

      8d498d75db51e93389671c07f668b99c622e5f4d70dcbabcadc242addb45d0d406a0e42681df3229581a683591ca2f5353ecfbd6782e4a0ddc13ae80a1987ece

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNupA:TCjsIOtEvwDpj5HE/OUHnSMZa

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks