Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_83d8bdf74e1eecfb42caa1c8cc91d1cf_cryptolocker

  • Size

    76KB

  • Sample

    240522-zdl6pafg57

  • MD5

    83d8bdf74e1eecfb42caa1c8cc91d1cf

  • SHA1

    a374141cdcd17aa260ecee96727efbb5ba8bed28

  • SHA256

    ba3383d920dbc96e8d35a477a516d22ccf47a1649fd1db3c26423ef878aa982d

  • SHA512

    624f14c7c7b7f513717d5392934aa482980c7ec78973cdfd4faaacda572eebf795f95aef2fe08cdf33db99ac79da23a9c49c0fa3f4f37d9fdea107d52cf13d36

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkY:X6a+SOtEvwDpjBZYvQd2P

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_83d8bdf74e1eecfb42caa1c8cc91d1cf_cryptolocker

    • Size

      76KB

    • MD5

      83d8bdf74e1eecfb42caa1c8cc91d1cf

    • SHA1

      a374141cdcd17aa260ecee96727efbb5ba8bed28

    • SHA256

      ba3383d920dbc96e8d35a477a516d22ccf47a1649fd1db3c26423ef878aa982d

    • SHA512

      624f14c7c7b7f513717d5392934aa482980c7ec78973cdfd4faaacda572eebf795f95aef2fe08cdf33db99ac79da23a9c49c0fa3f4f37d9fdea107d52cf13d36

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkY:X6a+SOtEvwDpjBZYvQd2P

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks