Overview

overview

10

Static

static

10

2024-05-01...er.exe

windows7-x64

9

2024-05-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-01_ca52b7377425cab41528e653db749c42_cryptolocker

  • Size

    43KB

  • Sample

    240501-fbzt8aga7y

  • MD5

    ca52b7377425cab41528e653db749c42

  • SHA1

    7f6e4ffc799961c9151466a87b2a6dc05e3b34b5

  • SHA256

    99a4c6fa0b4bfa865750f58aa51f4542bc7296c6c7734b6e18f6cb6d711f541f

  • SHA512

    e3dbee73680cb18298103b5bdab276788501b7c3f623b4f628c43c06a60ff6d3baa62a3860e617456746575696e52eb6bd5730f37ea6e47c8f3f66dd177ec2d6

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUg:bm74zYcgT/Ekn0ryfjh

Score
10/10

Malware Config

Targets

    • Target

      2024-05-01_ca52b7377425cab41528e653db749c42_cryptolocker

    • Size

      43KB

    • MD5

      ca52b7377425cab41528e653db749c42

    • SHA1

      7f6e4ffc799961c9151466a87b2a6dc05e3b34b5

    • SHA256

      99a4c6fa0b4bfa865750f58aa51f4542bc7296c6c7734b6e18f6cb6d711f541f

    • SHA512

      e3dbee73680cb18298103b5bdab276788501b7c3f623b4f628c43c06a60ff6d3baa62a3860e617456746575696e52eb6bd5730f37ea6e47c8f3f66dd177ec2d6

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUg:bm74zYcgT/Ekn0ryfjh

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks