Overview

overview

10

Static

static

10

2024-05-16...er.exe

windows7-x64

9

2024-05-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-16_98107c10a7c9682a7a2499aaacd45f48_cryptolocker

  • Size

    37KB

  • Sample

    240517-ae8zeagb48

  • MD5

    98107c10a7c9682a7a2499aaacd45f48

  • SHA1

    85385b039d149885093044754e686c3c27673ca0

  • SHA256

    e7797fd5fc61c318d9ec9b3858ba83071f38310c07cf3ccfad21c24b1a8d9ce1

  • SHA512

    56e1d63b73179278451fb4a18fe921b6d18b894f35d3481c8bcc6c44b9e35a2b32c58adf26890f88f4dbbbdee24a12abdcfd13603cc0fadeeaecc761b11ff33f

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4h6c:fT+hsMQMOtEvwDpjoIHh6c

Score
10/10

Malware Config

Targets

    • Target

      2024-05-16_98107c10a7c9682a7a2499aaacd45f48_cryptolocker

    • Size

      37KB

    • MD5

      98107c10a7c9682a7a2499aaacd45f48

    • SHA1

      85385b039d149885093044754e686c3c27673ca0

    • SHA256

      e7797fd5fc61c318d9ec9b3858ba83071f38310c07cf3ccfad21c24b1a8d9ce1

    • SHA512

      56e1d63b73179278451fb4a18fe921b6d18b894f35d3481c8bcc6c44b9e35a2b32c58adf26890f88f4dbbbdee24a12abdcfd13603cc0fadeeaecc761b11ff33f

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4h6c:fT+hsMQMOtEvwDpjoIHh6c

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks