Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_f17a9a6399cc7c249e6468ab74e40db9_cryptolocker

  • Size

    64KB

  • Sample

    240522-1wfx3aad6t

  • MD5

    f17a9a6399cc7c249e6468ab74e40db9

  • SHA1

    94f39e193a4a537fbecea273113b65c13b8ffa56

  • SHA256

    5182fa0a03200feb8988f65643411fa9090d069fd20d90467c67d8bf51879050

  • SHA512

    9da1619f9b6a9e4e43a3d325902aef1a36199e136e3df3908b41045c7edc68719ed087702bdcd9390fa161405b225d882a10bf94c614ce6fdc2de0838a056074

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiV:BbdDmjr+OtEvwDpjM8M

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_f17a9a6399cc7c249e6468ab74e40db9_cryptolocker

    • Size

      64KB

    • MD5

      f17a9a6399cc7c249e6468ab74e40db9

    • SHA1

      94f39e193a4a537fbecea273113b65c13b8ffa56

    • SHA256

      5182fa0a03200feb8988f65643411fa9090d069fd20d90467c67d8bf51879050

    • SHA512

      9da1619f9b6a9e4e43a3d325902aef1a36199e136e3df3908b41045c7edc68719ed087702bdcd9390fa161405b225d882a10bf94c614ce6fdc2de0838a056074

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiV:BbdDmjr+OtEvwDpjM8M

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks