Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_fcf13a64d77f3e32c6b133a03c6e9dfd_cryptolocker

  • Size

    42KB

  • Sample

    240521-tlv6nsbd8z

  • MD5

    fcf13a64d77f3e32c6b133a03c6e9dfd

  • SHA1

    d34bde97f5b5d42735ff216d0ad4f714354a1aaf

  • SHA256

    1e695056cf51fdb531106669b80af6dc19286dce98f8378c79a16facaf9a4a5f

  • SHA512

    749055df9956f8c0797db4b395ed69b48a34c5dfc13e3ba549d62f791aa6f4a5182767583c5fa689398706f32a7b963b0309ce5a1f7bf15f8dae6e30b554984d

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqtH:bCDOw9aMDooc+vAqtH

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_fcf13a64d77f3e32c6b133a03c6e9dfd_cryptolocker

    • Size

      42KB

    • MD5

      fcf13a64d77f3e32c6b133a03c6e9dfd

    • SHA1

      d34bde97f5b5d42735ff216d0ad4f714354a1aaf

    • SHA256

      1e695056cf51fdb531106669b80af6dc19286dce98f8378c79a16facaf9a4a5f

    • SHA512

      749055df9956f8c0797db4b395ed69b48a34c5dfc13e3ba549d62f791aa6f4a5182767583c5fa689398706f32a7b963b0309ce5a1f7bf15f8dae6e30b554984d

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqtH:bCDOw9aMDooc+vAqtH

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks