Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_516ee3cd4f91242c708adb09c46f24c5_cryptolocker

  • Size

    64KB

  • Sample

    240521-x7bwpsga35

  • MD5

    516ee3cd4f91242c708adb09c46f24c5

  • SHA1

    efcb528d28edfa52c42209932071389ff560ba7b

  • SHA256

    dec252c6180e05840996b8d616cb81f0c8171c581cc9a55c9676915ea42ba328

  • SHA512

    1875bbf160c4601f61d9cf68c28644196c3c2d2b0f1a9336d95cf2821dfd07ee8e6be2aae3e881cbec9ceb618a5527b3c6c63a8861f42bf6be64cdbe84c2232d

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293WS:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_516ee3cd4f91242c708adb09c46f24c5_cryptolocker

    • Size

      64KB

    • MD5

      516ee3cd4f91242c708adb09c46f24c5

    • SHA1

      efcb528d28edfa52c42209932071389ff560ba7b

    • SHA256

      dec252c6180e05840996b8d616cb81f0c8171c581cc9a55c9676915ea42ba328

    • SHA512

      1875bbf160c4601f61d9cf68c28644196c3c2d2b0f1a9336d95cf2821dfd07ee8e6be2aae3e881cbec9ceb618a5527b3c6c63a8861f42bf6be64cdbe84c2232d

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293WS:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks