Overview

overview

10

Static

static

10

2024-05-04...er.exe

windows7-x64

9

2024-05-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-04_956df7c76c7f985e6e2cd1c6cb69ead7_cryptolocker

  • Size

    81KB

  • Sample

    240504-gbgt3sec5w

  • MD5

    956df7c76c7f985e6e2cd1c6cb69ead7

  • SHA1

    197fa979e9d07495f124d60fb9782440eaf18d3e

  • SHA256

    5960896cdb44165a5c7329ed3967532800a91bb99f1c5ce9fe35122bfabd903b

  • SHA512

    dd8a96e7fbd8bb288f8a08a475965bb649e7a7cbc2700ff62c3e3c0a6895dbd6fd41fcf139fe5f084ddce61c5ed524df51f5b3519a8e8ec88f3d1c48ddfb1639

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVZN:vCjsIOtEvwDpj5H9YvQd2I

Score
10/10

Malware Config

Targets

    • Target

      2024-05-04_956df7c76c7f985e6e2cd1c6cb69ead7_cryptolocker

    • Size

      81KB

    • MD5

      956df7c76c7f985e6e2cd1c6cb69ead7

    • SHA1

      197fa979e9d07495f124d60fb9782440eaf18d3e

    • SHA256

      5960896cdb44165a5c7329ed3967532800a91bb99f1c5ce9fe35122bfabd903b

    • SHA512

      dd8a96e7fbd8bb288f8a08a475965bb649e7a7cbc2700ff62c3e3c0a6895dbd6fd41fcf139fe5f084ddce61c5ed524df51f5b3519a8e8ec88f3d1c48ddfb1639

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVZN:vCjsIOtEvwDpj5H9YvQd2I

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks