Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-11_822ea40e6098d850f04add21dee6546e_cryptolocker

  • Size

    66KB

  • Sample

    240511-xahb8abg5v

  • MD5

    822ea40e6098d850f04add21dee6546e

  • SHA1

    f61b5858ea43b3dc71f78684206088c6a179d44e

  • SHA256

    3cbac95afcb4d4ad28ba8bbdfc4d29df8b7db99b44d5716884794114778ab0ff

  • SHA512

    21b054157571e76ed016ddf356d8a64c529beb55230622d19220a3e838b0f6e93eb12256fd46e1338a60c7238c238ef2ea9df35be1f57ac8afd9424100c827f3

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGyz:TCjsIOtEvwDpj5HE/OUHnSMYA

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_822ea40e6098d850f04add21dee6546e_cryptolocker

    • Size

      66KB

    • MD5

      822ea40e6098d850f04add21dee6546e

    • SHA1

      f61b5858ea43b3dc71f78684206088c6a179d44e

    • SHA256

      3cbac95afcb4d4ad28ba8bbdfc4d29df8b7db99b44d5716884794114778ab0ff

    • SHA512

      21b054157571e76ed016ddf356d8a64c529beb55230622d19220a3e838b0f6e93eb12256fd46e1338a60c7238c238ef2ea9df35be1f57ac8afd9424100c827f3

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGyz:TCjsIOtEvwDpj5HE/OUHnSMYA

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks