Overview

overview

10

Static

static

10

2024-05-14...er.exe

windows7-x64

9

2024-05-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-14_ec3b117f179ffd32794a557ea6d424b4_cryptolocker

  • Size

    390KB

  • Sample

    240514-y3psfafb26

  • MD5

    ec3b117f179ffd32794a557ea6d424b4

  • SHA1

    6e1b4f1fb968f934f5440a17a7b4a89220b942b2

  • SHA256

    421891d5b65e8aec00a4f44ae27bf9bb2fd22763bd032a19b072e9c21fb477d1

  • SHA512

    2e6671bdac938987fa220826f7c720ef3753af2b0d33dc270762d6d2703ed0364fabe50e499738f44f82583b2120d1e0babae8ca364f057482fb69f8dfd496da

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX0:nnOflT/ZFIjBz3xjTxynGUOUhX0

Score
10/10

Malware Config

Targets

    • Target

      2024-05-14_ec3b117f179ffd32794a557ea6d424b4_cryptolocker

    • Size

      390KB

    • MD5

      ec3b117f179ffd32794a557ea6d424b4

    • SHA1

      6e1b4f1fb968f934f5440a17a7b4a89220b942b2

    • SHA256

      421891d5b65e8aec00a4f44ae27bf9bb2fd22763bd032a19b072e9c21fb477d1

    • SHA512

      2e6671bdac938987fa220826f7c720ef3753af2b0d33dc270762d6d2703ed0364fabe50e499738f44f82583b2120d1e0babae8ca364f057482fb69f8dfd496da

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX0:nnOflT/ZFIjBz3xjTxynGUOUhX0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks