Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_cb367e4008a624c53e85f3873a6f6bfc_cryptolocker

  • Size

    44KB

  • Sample

    240521-f3jbjsbe6s

  • MD5

    cb367e4008a624c53e85f3873a6f6bfc

  • SHA1

    085638b906f73a6fff345a1a4cd9e96d0d4dc5ec

  • SHA256

    48a63229cb8fc011d664e7e19dbf66bdecff5c3cc030adc644a56ee0a16e0687

  • SHA512

    4735f18408fba8939d3d5ae2c9007299ce723667f2da8303bedba1d7b680fee866e41ad0dbc0a0a20ab7486193c8ed49646776f6095cb44cd20dcea10562a6a1

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDw:bm74zYcgT/Ekn0ryfjvw

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_cb367e4008a624c53e85f3873a6f6bfc_cryptolocker

    • Size

      44KB

    • MD5

      cb367e4008a624c53e85f3873a6f6bfc

    • SHA1

      085638b906f73a6fff345a1a4cd9e96d0d4dc5ec

    • SHA256

      48a63229cb8fc011d664e7e19dbf66bdecff5c3cc030adc644a56ee0a16e0687

    • SHA512

      4735f18408fba8939d3d5ae2c9007299ce723667f2da8303bedba1d7b680fee866e41ad0dbc0a0a20ab7486193c8ed49646776f6095cb44cd20dcea10562a6a1

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDw:bm74zYcgT/Ekn0ryfjvw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks