Overview

overview

10

Static

static

10

2024-05-23...er.exe

windows7-x64

9

2024-05-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_487e15ea88ce8f82759ee4c9e9f810a7_cryptolocker

  • Size

    44KB

  • Sample

    240523-bszhkagd9z

  • MD5

    487e15ea88ce8f82759ee4c9e9f810a7

  • SHA1

    2403aa395f1f99f1802a4050d7e157a75929502b

  • SHA256

    7de1910a924e1ad4bac24e566f09b9a5f57edba43f1f5458cfdf2d2f42196f25

  • SHA512

    20197e2c27c61438722c4e6e08a75083207d838dfebbcd176bfa70abc2b07031a395f655d9cc17f9fe4eb1fac39c0541dfd3d2427711370fde4d2e4530df58a3

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpEui0U3Tw:bm74zYcgT/Ekn0ryfjLuuw

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_487e15ea88ce8f82759ee4c9e9f810a7_cryptolocker

    • Size

      44KB

    • MD5

      487e15ea88ce8f82759ee4c9e9f810a7

    • SHA1

      2403aa395f1f99f1802a4050d7e157a75929502b

    • SHA256

      7de1910a924e1ad4bac24e566f09b9a5f57edba43f1f5458cfdf2d2f42196f25

    • SHA512

      20197e2c27c61438722c4e6e08a75083207d838dfebbcd176bfa70abc2b07031a395f655d9cc17f9fe4eb1fac39c0541dfd3d2427711370fde4d2e4530df58a3

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpEui0U3Tw:bm74zYcgT/Ekn0ryfjLuuw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks