Overview

overview

10

Static

static

10

2024-05-17...er.exe

windows7-x64

9

2024-05-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-17_5bd2505e7c82c97d638a528fc55067b6_cryptolocker

  • Size

    40KB

  • Sample

    240517-kx2yxsae6t

  • MD5

    5bd2505e7c82c97d638a528fc55067b6

  • SHA1

    eec9bf9c27a1f38a965f67b1871e31540d53f529

  • SHA256

    64df8c615cef59c82b8fa498f26f5df35d0f89f1e45f1b7d368995e4191b9746

  • SHA512

    bbbe460ca639a9b6422847c73649f229ee7715a82326b164afce097824c0c454e09e12bafcb79af9b0d0d6d324a2c25ab097a980ea617b15d8c554fc62d29241

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb1:ZzFbxmLPWQMOtEvwDpjLeJAsKcb1

Score
10/10

Malware Config

Targets

    • Target

      2024-05-17_5bd2505e7c82c97d638a528fc55067b6_cryptolocker

    • Size

      40KB

    • MD5

      5bd2505e7c82c97d638a528fc55067b6

    • SHA1

      eec9bf9c27a1f38a965f67b1871e31540d53f529

    • SHA256

      64df8c615cef59c82b8fa498f26f5df35d0f89f1e45f1b7d368995e4191b9746

    • SHA512

      bbbe460ca639a9b6422847c73649f229ee7715a82326b164afce097824c0c454e09e12bafcb79af9b0d0d6d324a2c25ab097a980ea617b15d8c554fc62d29241

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb1:ZzFbxmLPWQMOtEvwDpjLeJAsKcb1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks