Overview

overview

10

Static

static

10

2024-05-10...er.exe

windows7-x64

9

2024-05-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-10_521612a32421273ce779cd41a803677c_cryptolocker

  • Size

    40KB

  • Sample

    240510-ptfnqsaa62

  • MD5

    521612a32421273ce779cd41a803677c

  • SHA1

    a981721f325ff81c7acc0f7e943ecf59ca0b1e28

  • SHA256

    785b31d2ddd39821e5ef30a3bc05fd2a3fec45268115d45e83cc0289e67f3cd5

  • SHA512

    c4fdb4b5f1dec57ac0a85a76ca24f474d75284fff4f3fa7708b8e47f9b7f3bc3f926b8c4d00aa12929d3c8f0b55d8d5a43a03440d438073130e1d6ac525e805b

  • SSDEEP

    768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwz:bA6YcA/X6G0W143Qz

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_521612a32421273ce779cd41a803677c_cryptolocker

    • Size

      40KB

    • MD5

      521612a32421273ce779cd41a803677c

    • SHA1

      a981721f325ff81c7acc0f7e943ecf59ca0b1e28

    • SHA256

      785b31d2ddd39821e5ef30a3bc05fd2a3fec45268115d45e83cc0289e67f3cd5

    • SHA512

      c4fdb4b5f1dec57ac0a85a76ca24f474d75284fff4f3fa7708b8e47f9b7f3bc3f926b8c4d00aa12929d3c8f0b55d8d5a43a03440d438073130e1d6ac525e805b

    • SSDEEP

      768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwz:bA6YcA/X6G0W143Qz

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks