Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-21_82df42d99e30d0a04a8b71928899af66_cryptolocker

  • Size

    39KB

  • Sample

    240521-xbac1aee7z

  • MD5

    82df42d99e30d0a04a8b71928899af66

  • SHA1

    db7691e0c5e3ec81460061e454f1f77783d40364

  • SHA256

    6896056e4271eb203f6349c9f43bb1ed919315f0bae6f5e2752c82338a3fdebc

  • SHA512

    0aed770058cced6fef2b83030496049dfce2ab1f8d956dbb4e026432567baf14e5ab82f8159d1c4aff1469da7e8d5c2005f4c8edf97ceb463760f199fd5bf8b4

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzMAZ+gA3:vj+jsMQMOtEvwDpj5HcSYPU

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_82df42d99e30d0a04a8b71928899af66_cryptolocker

    • Size

      39KB

    • MD5

      82df42d99e30d0a04a8b71928899af66

    • SHA1

      db7691e0c5e3ec81460061e454f1f77783d40364

    • SHA256

      6896056e4271eb203f6349c9f43bb1ed919315f0bae6f5e2752c82338a3fdebc

    • SHA512

      0aed770058cced6fef2b83030496049dfce2ab1f8d956dbb4e026432567baf14e5ab82f8159d1c4aff1469da7e8d5c2005f4c8edf97ceb463760f199fd5bf8b4

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzMAZ+gA3:vj+jsMQMOtEvwDpj5HcSYPU

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks