Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_4f067ca11a94e885ff955d2c2773cfd3_cryptolocker

  • Size

    46KB

  • Sample

    240521-s1rlcsae78

  • MD5

    4f067ca11a94e885ff955d2c2773cfd3

  • SHA1

    7e25138783f3c0f82569c8479bd056a65506ed26

  • SHA256

    2a4fb5829a4e6f925570857f56896b97446ee6db6d369c7048a15f337d4a2618

  • SHA512

    ca78b4b83c7c5fd7ed58be877dd1f400f7ece10fc5a8c077ae5b9563abed3a172a8b869d4477ebb4dc15d860b29972788a381e46fc0da9e3c61f652113a83d1f

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoLk:qmbhXDmjr5MOtEvwDpj5cDtKkQZQq

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_4f067ca11a94e885ff955d2c2773cfd3_cryptolocker

    • Size

      46KB

    • MD5

      4f067ca11a94e885ff955d2c2773cfd3

    • SHA1

      7e25138783f3c0f82569c8479bd056a65506ed26

    • SHA256

      2a4fb5829a4e6f925570857f56896b97446ee6db6d369c7048a15f337d4a2618

    • SHA512

      ca78b4b83c7c5fd7ed58be877dd1f400f7ece10fc5a8c077ae5b9563abed3a172a8b869d4477ebb4dc15d860b29972788a381e46fc0da9e3c61f652113a83d1f

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoLk:qmbhXDmjr5MOtEvwDpj5cDtKkQZQq

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks