Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_ea6b2510d012009c749895320a84091a_cryptolocker

  • Size

    80KB

  • Sample

    240521-yfbbjage3w

  • MD5

    ea6b2510d012009c749895320a84091a

  • SHA1

    2b508e7c81a1ebcd4bcf9de9fa5b9fd0f65fdd81

  • SHA256

    7c09667f70638b76873d48cd5d8e689e81778b7a8b5601d0431501dfa81e286f

  • SHA512

    f25f48c710595299e398e026c7bfb234ac0cb6e3ce8170a944a56d45d33b775ec0c8ca612e49d06a1acad383710147777a64ab4b7291dfdc60295b0f9cdc5475

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWT+v:ZVxkGOtEvwDpjcaxF

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_ea6b2510d012009c749895320a84091a_cryptolocker

    • Size

      80KB

    • MD5

      ea6b2510d012009c749895320a84091a

    • SHA1

      2b508e7c81a1ebcd4bcf9de9fa5b9fd0f65fdd81

    • SHA256

      7c09667f70638b76873d48cd5d8e689e81778b7a8b5601d0431501dfa81e286f

    • SHA512

      f25f48c710595299e398e026c7bfb234ac0cb6e3ce8170a944a56d45d33b775ec0c8ca612e49d06a1acad383710147777a64ab4b7291dfdc60295b0f9cdc5475

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWT+v:ZVxkGOtEvwDpjcaxF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks