Overview

overview

10

Static

static

10

2024-05-20...er.exe

windows7-x64

9

2024-05-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-20_b2168f93f73cad852b6e5ded62fa7d14_cryptolocker

  • Size

    32KB

  • Sample

    240520-wmnt4abd34

  • MD5

    b2168f93f73cad852b6e5ded62fa7d14

  • SHA1

    fc13237f2b4607d9d9f90587763fc0bd0c922074

  • SHA256

    4e4ef953b205e7e65dd195f4f27b220d8e0946e7459f3c8e0a8198ec216b558a

  • SHA512

    37883b1cef7922ba496e2a80875caf1b88f68eda26cd41a9f89c765a2b6049fb6e596210f1f323411b1c9bc76a435a0688f947598e813d65f946ee37da3aaf27

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7sA:bAvJCYOOvbRPDEgXRcJwA

Score
10/10

Malware Config

Targets

    • Target

      2024-05-20_b2168f93f73cad852b6e5ded62fa7d14_cryptolocker

    • Size

      32KB

    • MD5

      b2168f93f73cad852b6e5ded62fa7d14

    • SHA1

      fc13237f2b4607d9d9f90587763fc0bd0c922074

    • SHA256

      4e4ef953b205e7e65dd195f4f27b220d8e0946e7459f3c8e0a8198ec216b558a

    • SHA512

      37883b1cef7922ba496e2a80875caf1b88f68eda26cd41a9f89c765a2b6049fb6e596210f1f323411b1c9bc76a435a0688f947598e813d65f946ee37da3aaf27

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7sA:bAvJCYOOvbRPDEgXRcJwA

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks