Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_fc956437a71d3e7f4ee01e6629b09f72_cryptolocker

  • Size

    86KB

  • Sample

    240521-tlrhgsbc99

  • MD5

    fc956437a71d3e7f4ee01e6629b09f72

  • SHA1

    3b508a460b674fb670b8e3775838e0b6a811693b

  • SHA256

    405ee5eca8ce7836a4c93f374201841396ec421de6323ffe30d895cb4abd99af

  • SHA512

    f46b328d660aeabdaed0dbd3f818b761d36608015a91a6ed3a98ab4ebc07b040af72a424bc43ebb345545bec9145cd4ab2fb46074c5ce93a0f9c4550629c5871

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6a9:V6a+pOtEvwDpjvpp

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_fc956437a71d3e7f4ee01e6629b09f72_cryptolocker

    • Size

      86KB

    • MD5

      fc956437a71d3e7f4ee01e6629b09f72

    • SHA1

      3b508a460b674fb670b8e3775838e0b6a811693b

    • SHA256

      405ee5eca8ce7836a4c93f374201841396ec421de6323ffe30d895cb4abd99af

    • SHA512

      f46b328d660aeabdaed0dbd3f818b761d36608015a91a6ed3a98ab4ebc07b040af72a424bc43ebb345545bec9145cd4ab2fb46074c5ce93a0f9c4550629c5871

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6a9:V6a+pOtEvwDpjvpp

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks