Overview

overview

10

Static

static

10

2024-05-10...er.exe

windows7-x64

9

2024-05-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-10_489afab9a09ca205e43929bc51731139_cryptolocker

  • Size

    36KB

  • Sample

    240510-e5vxpabb8v

  • MD5

    489afab9a09ca205e43929bc51731139

  • SHA1

    ac95c08dec92a846a62f9ad3f5075d3f0953abb9

  • SHA256

    c864096ed187ebcc5b6cf722f3b3925547595807b00362cd6bb937ea1936489a

  • SHA512

    23b36aad07468369a967aba70e8080b0af590b5d6992a76f26ad16fe695767b395c8bc6502500a63fc5eff3a66ea32677598ac475d474506fb3ff27625553a6f

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qZvNbrN:btB9g/WItCSsAGjX7r3BTZvN3N

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_489afab9a09ca205e43929bc51731139_cryptolocker

    • Size

      36KB

    • MD5

      489afab9a09ca205e43929bc51731139

    • SHA1

      ac95c08dec92a846a62f9ad3f5075d3f0953abb9

    • SHA256

      c864096ed187ebcc5b6cf722f3b3925547595807b00362cd6bb937ea1936489a

    • SHA512

      23b36aad07468369a967aba70e8080b0af590b5d6992a76f26ad16fe695767b395c8bc6502500a63fc5eff3a66ea32677598ac475d474506fb3ff27625553a6f

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qZvNbrN:btB9g/WItCSsAGjX7r3BTZvN3N

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks