Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_9a13788f333db94f13c6b36b34a5966b_cryptolocker

  • Size

    64KB

  • Sample

    240522-1q112sac83

  • MD5

    9a13788f333db94f13c6b36b34a5966b

  • SHA1

    9ff7e1378fa1d91b44a51938e96502fea0bf8a39

  • SHA256

    fd65fc44ea3e33cc8eeaa1d34bf7feb21d2aad53b7c0cb964c613e806a2d88a1

  • SHA512

    253c843047d89ccd63f5e226fa18b6442d775715595870c87abe0358c7680f0d7f3a9378011848f24c719d18dc505baf68f08800b0c61f91a620ccaec4cc1e9d

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiK:BbdDmjr+OtEvwDpjM8/

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_9a13788f333db94f13c6b36b34a5966b_cryptolocker

    • Size

      64KB

    • MD5

      9a13788f333db94f13c6b36b34a5966b

    • SHA1

      9ff7e1378fa1d91b44a51938e96502fea0bf8a39

    • SHA256

      fd65fc44ea3e33cc8eeaa1d34bf7feb21d2aad53b7c0cb964c613e806a2d88a1

    • SHA512

      253c843047d89ccd63f5e226fa18b6442d775715595870c87abe0358c7680f0d7f3a9378011848f24c719d18dc505baf68f08800b0c61f91a620ccaec4cc1e9d

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiK:BbdDmjr+OtEvwDpjM8/

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks