Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_40e94b4ed3591996b7ac9e47495397e6_cryptolocker

  • Size

    46KB

  • Sample

    240522-b2zvpagc48

  • MD5

    40e94b4ed3591996b7ac9e47495397e6

  • SHA1

    65fb4cebbbd4744544db8ed909d897de7e47a441

  • SHA256

    aa4e68f37f862bafd449831a548c5928b7a7ad34e25e22def2d9a02d5b62aec4

  • SHA512

    c9a6fc794425df3ec3d237e65ae534a617b754dffe42bb2c01316e86b51ddf20d37b7f1029883ec4809ffcfd1b2e50266e7922a83460ddb37cda42bb348f2e2a

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJ/:V6QFElP6n+gMQMOtEvwDpjyaYaFAh32

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_40e94b4ed3591996b7ac9e47495397e6_cryptolocker

    • Size

      46KB

    • MD5

      40e94b4ed3591996b7ac9e47495397e6

    • SHA1

      65fb4cebbbd4744544db8ed909d897de7e47a441

    • SHA256

      aa4e68f37f862bafd449831a548c5928b7a7ad34e25e22def2d9a02d5b62aec4

    • SHA512

      c9a6fc794425df3ec3d237e65ae534a617b754dffe42bb2c01316e86b51ddf20d37b7f1029883ec4809ffcfd1b2e50266e7922a83460ddb37cda42bb348f2e2a

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJ/:V6QFElP6n+gMQMOtEvwDpjyaYaFAh32

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks