Overview

overview

10

Static

static

10

2024-04-30...er.exe

windows7-x64

9

2024-04-30...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-30_2355d6918d222d93ffa5c7b1d8e7cc1e_cryptolocker

  • Size

    50KB

  • Sample

    240430-e4zjgscc82

  • MD5

    2355d6918d222d93ffa5c7b1d8e7cc1e

  • SHA1

    190192b6eae366a3d5d0f6c8e122ff9f3061b965

  • SHA256

    c18ee9f4084ca394c396abafe33de51523557ce3159fa5f01c92bdfc815678ba

  • SHA512

    558a0589f279606af8d9df8eaf3f45876ed828a255890481f4c047244c371a82e1bf0f41ac3c90d7e672f7396d50cbfb41909c23f94ddcb14994fda18e6e1341

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moccv:qmbhXDmjr5MOtEvwDpj5cDtKkQZQJ

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_2355d6918d222d93ffa5c7b1d8e7cc1e_cryptolocker

    • Size

      50KB

    • MD5

      2355d6918d222d93ffa5c7b1d8e7cc1e

    • SHA1

      190192b6eae366a3d5d0f6c8e122ff9f3061b965

    • SHA256

      c18ee9f4084ca394c396abafe33de51523557ce3159fa5f01c92bdfc815678ba

    • SHA512

      558a0589f279606af8d9df8eaf3f45876ed828a255890481f4c047244c371a82e1bf0f41ac3c90d7e672f7396d50cbfb41909c23f94ddcb14994fda18e6e1341

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moccv:qmbhXDmjr5MOtEvwDpj5cDtKkQZQJ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks