Overview

overview

10

Static

static

10

2024-05-04...er.exe

windows7-x64

9

2024-05-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-04_fd2d8c59269cdf5b9d9c0d472cb6395c_cryptolocker

  • Size

    40KB

  • Sample

    240504-fsn42sgh93

  • MD5

    fd2d8c59269cdf5b9d9c0d472cb6395c

  • SHA1

    ae48b650346a798979f55424ab37c81e6ae68360

  • SHA256

    91be6791091f0483dffc869db5d26c40e799709fc7bd9031cb2c4e653768bc62

  • SHA512

    8f7791ce9d1b53dfd23173bfc8d51dfc74a6c4ecec3267d9b18dca8d94f859d8efebf7e2450725bcf487e13de7b7ec732cdcdb19ad7de79d17432720d1ce952a

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7F:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7F

Score
10/10

Malware Config

Targets

    • Target

      2024-05-04_fd2d8c59269cdf5b9d9c0d472cb6395c_cryptolocker

    • Size

      40KB

    • MD5

      fd2d8c59269cdf5b9d9c0d472cb6395c

    • SHA1

      ae48b650346a798979f55424ab37c81e6ae68360

    • SHA256

      91be6791091f0483dffc869db5d26c40e799709fc7bd9031cb2c4e653768bc62

    • SHA512

      8f7791ce9d1b53dfd23173bfc8d51dfc74a6c4ecec3267d9b18dca8d94f859d8efebf7e2450725bcf487e13de7b7ec732cdcdb19ad7de79d17432720d1ce952a

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7F:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7F

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks