Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_2c30683fca6fb9982c8ba3353c57c58d_cryptolocker

  • Size

    5.5MB

  • Sample

    240522-ebrm6sbb7v

  • MD5

    2c30683fca6fb9982c8ba3353c57c58d

  • SHA1

    94b2b224b5d1042f3306e73411b3c143ef29b64b

  • SHA256

    9932ed79d7958609a1af7203f19c38744d001aefabb751fb857d3cdd8d876973

  • SHA512

    81051a1fdb183afa645c5b4f736fc43951d0780c0dd7e4685a8bd4ecc37d955db7871eb43abf55c57793c1e7ff13cb795c6d2cb05e2ad69c864e6a344166359a

  • SSDEEP

    98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+Ufg:otTvgz73XMpxDbcwYvt3sFa4Og

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_2c30683fca6fb9982c8ba3353c57c58d_cryptolocker

    • Size

      5.5MB

    • MD5

      2c30683fca6fb9982c8ba3353c57c58d

    • SHA1

      94b2b224b5d1042f3306e73411b3c143ef29b64b

    • SHA256

      9932ed79d7958609a1af7203f19c38744d001aefabb751fb857d3cdd8d876973

    • SHA512

      81051a1fdb183afa645c5b4f736fc43951d0780c0dd7e4685a8bd4ecc37d955db7871eb43abf55c57793c1e7ff13cb795c6d2cb05e2ad69c864e6a344166359a

    • SSDEEP

      98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+Ufg:otTvgz73XMpxDbcwYvt3sFa4Og

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks