Overview

overview

10

Static

static

10

2024-05-02...er.exe

windows7-x64

9

2024-05-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-02_156972dc9c353f6d145302ec5117ba24_cryptolocker

  • Size

    36KB

  • Sample

    240502-ec7qsaab55

  • MD5

    156972dc9c353f6d145302ec5117ba24

  • SHA1

    76994885303f2da16caab4c06859915deafb8423

  • SHA256

    20944df10f4b5760c54285eef940babfd466aabed3602d18b9081747fdf6da34

  • SHA512

    f311bf1889ae0dc3eee2249311129243e08cd59558da804af1ce2da32b1488227776c139e1cabd1bab72d0262479d5816318b7858cf4393d01c5e6530698c689

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY26ug:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36F

Score
10/10

Malware Config

Targets

    • Target

      2024-05-02_156972dc9c353f6d145302ec5117ba24_cryptolocker

    • Size

      36KB

    • MD5

      156972dc9c353f6d145302ec5117ba24

    • SHA1

      76994885303f2da16caab4c06859915deafb8423

    • SHA256

      20944df10f4b5760c54285eef940babfd466aabed3602d18b9081747fdf6da34

    • SHA512

      f311bf1889ae0dc3eee2249311129243e08cd59558da804af1ce2da32b1488227776c139e1cabd1bab72d0262479d5816318b7858cf4393d01c5e6530698c689

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY26ug:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36F

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks