Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-11_1dab6c5161ea821d16965f76fe131adf_cryptolocker

  • Size

    32KB

  • Sample

    240511-pze96abd27

  • MD5

    1dab6c5161ea821d16965f76fe131adf

  • SHA1

    d901ad8a7a37787c214218471ec3e05a07fcb127

  • SHA256

    43716fca7014c46c72d25eaa0baf8c30878bc5d7d52ff641f7bc9dd5deabcb02

  • SHA512

    e691c8a365267d870c1cad091f6a0a4c33b326159558c51121da6adc8b48a90aa506446b4ae2d5c7deac2f748154a8028786169428bcf6f1e0e15bfef147ed5b

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7A:bAvJCYOOvbRPDEgXRcJk

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_1dab6c5161ea821d16965f76fe131adf_cryptolocker

    • Size

      32KB

    • MD5

      1dab6c5161ea821d16965f76fe131adf

    • SHA1

      d901ad8a7a37787c214218471ec3e05a07fcb127

    • SHA256

      43716fca7014c46c72d25eaa0baf8c30878bc5d7d52ff641f7bc9dd5deabcb02

    • SHA512

      e691c8a365267d870c1cad091f6a0a4c33b326159558c51121da6adc8b48a90aa506446b4ae2d5c7deac2f748154a8028786169428bcf6f1e0e15bfef147ed5b

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7A:bAvJCYOOvbRPDEgXRcJk

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks