Overview

overview

10

Static

static

10

2024-05-02...er.exe

windows7-x64

9

2024-05-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-02_9002ff554d8e4c095f72511a7100c736_cryptolocker

  • Size

    34KB

  • Sample

    240502-c1a1lsee9x

  • MD5

    9002ff554d8e4c095f72511a7100c736

  • SHA1

    985b6294707f8ce2350e67027870bb723656a7a6

  • SHA256

    ba7f38c30cc85d7b5f83510f5876a32b2e901a6d74d6e3ee575257c9afab9697

  • SHA512

    04253fda0a2e7259ed0b938b2cbd0058112f7359af55a0f053f52cfa41b379f7e201f568870550a7503b89a28601f8ae75a66ecd1f9672f32d6a9b004afcc0be

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9gxrOQ:bAvJCYOOvbRPDEgXRcuM9gxiQ

Score
10/10

Malware Config

Targets

    • Target

      2024-05-02_9002ff554d8e4c095f72511a7100c736_cryptolocker

    • Size

      34KB

    • MD5

      9002ff554d8e4c095f72511a7100c736

    • SHA1

      985b6294707f8ce2350e67027870bb723656a7a6

    • SHA256

      ba7f38c30cc85d7b5f83510f5876a32b2e901a6d74d6e3ee575257c9afab9697

    • SHA512

      04253fda0a2e7259ed0b938b2cbd0058112f7359af55a0f053f52cfa41b379f7e201f568870550a7503b89a28601f8ae75a66ecd1f9672f32d6a9b004afcc0be

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9gxrOQ:bAvJCYOOvbRPDEgXRcuM9gxiQ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks