Overview

overview

10

Static

static

10

2024-05-20...er.exe

windows7-x64

9

2024-05-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-20_5039e02e74a26c2e4a3a3367455f4da2_cryptolocker

  • Size

    86KB

  • Sample

    240520-r3hwkaeh9y

  • MD5

    5039e02e74a26c2e4a3a3367455f4da2

  • SHA1

    e9389eefeff66ae3f272141d2a63e88a8a5efba9

  • SHA256

    4d0b4b80dc9744f54e552a2aba873b2857d96e6eb7d59bb113c28638b5507670

  • SHA512

    3d0e457bbc4d424cd45296dbdd7b49c243a00b84867652fd3c17602098474da4c2cc84ee6d3863bea5cbf9c1626e45bbc4f58f2b877ddab33eab2e4413490f33

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6a5:V6a+pOtEvwDpjvpN

Score
10/10

Malware Config

Targets

    • Target

      2024-05-20_5039e02e74a26c2e4a3a3367455f4da2_cryptolocker

    • Size

      86KB

    • MD5

      5039e02e74a26c2e4a3a3367455f4da2

    • SHA1

      e9389eefeff66ae3f272141d2a63e88a8a5efba9

    • SHA256

      4d0b4b80dc9744f54e552a2aba873b2857d96e6eb7d59bb113c28638b5507670

    • SHA512

      3d0e457bbc4d424cd45296dbdd7b49c243a00b84867652fd3c17602098474da4c2cc84ee6d3863bea5cbf9c1626e45bbc4f58f2b877ddab33eab2e4413490f33

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6a5:V6a+pOtEvwDpjvpN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks