Overview

overview

10

Static

static

10

2024-05-23...er.exe

windows7-x64

9

2024-05-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-23_050ad54e13613909c096fc9fe1eb9429_cryptolocker

  • Size

    36KB

  • Sample

    240523-va3baahe8t

  • MD5

    050ad54e13613909c096fc9fe1eb9429

  • SHA1

    2eb861898a65577289b7d9a7d4a09ee047659d97

  • SHA256

    b8d18e315a3b3517bff697de4e950886802980223f25d8771859d98b3bb3126e

  • SHA512

    338f6832a899187164b93ff01c6e50c7f8be6b650c29bde3227d544d1d17a9650d65729db8132796bd9a37f7dd351a7642adc70fcc7fb5c20f318c942ba31c48

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNCu:bAvJCYOOvbRPDEgXRc+BAILYfN

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_050ad54e13613909c096fc9fe1eb9429_cryptolocker

    • Size

      36KB

    • MD5

      050ad54e13613909c096fc9fe1eb9429

    • SHA1

      2eb861898a65577289b7d9a7d4a09ee047659d97

    • SHA256

      b8d18e315a3b3517bff697de4e950886802980223f25d8771859d98b3bb3126e

    • SHA512

      338f6832a899187164b93ff01c6e50c7f8be6b650c29bde3227d544d1d17a9650d65729db8132796bd9a37f7dd351a7642adc70fcc7fb5c20f318c942ba31c48

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNCu:bAvJCYOOvbRPDEgXRc+BAILYfN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks