Overview

overview

10

Static

static

10

2024-05-09...er.exe

windows7-x64

9

2024-05-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-09_b00be9372eeac6bf5c2c12c7e587e5c7_cryptolocker

  • Size

    41KB

  • Sample

    240509-samvgsae38

  • MD5

    b00be9372eeac6bf5c2c12c7e587e5c7

  • SHA1

    f455ca8e2b385ea75900b835fc5a1bd810a414bc

  • SHA256

    55cb052dab2a1db8598291bd1e2de9fa4e73a8bbb903b18a517822b8d6b4461e

  • SHA512

    35b7677b5f03e0cd213cab81ebacbd8657b9e7236e6d05427251236cbc01463503f96d5a372db7a62d01778bf3f58f33866553351f7c28a4c951135459d5a138

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xgyZ:bIDOw9a0Dwo3P1ojvUSD79yyZ

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_b00be9372eeac6bf5c2c12c7e587e5c7_cryptolocker

    • Size

      41KB

    • MD5

      b00be9372eeac6bf5c2c12c7e587e5c7

    • SHA1

      f455ca8e2b385ea75900b835fc5a1bd810a414bc

    • SHA256

      55cb052dab2a1db8598291bd1e2de9fa4e73a8bbb903b18a517822b8d6b4461e

    • SHA512

      35b7677b5f03e0cd213cab81ebacbd8657b9e7236e6d05427251236cbc01463503f96d5a372db7a62d01778bf3f58f33866553351f7c28a4c951135459d5a138

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xgyZ:bIDOw9a0Dwo3P1ojvUSD79yyZ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks