Overview

overview

10

Static

static

10

2024-05-24...er.exe

windows7-x64

9

2024-05-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-24_c40f23e161843044e8cb98a595087fc5_cryptolocker

  • Size

    44KB

  • Sample

    240524-emxnkacd91

  • MD5

    c40f23e161843044e8cb98a595087fc5

  • SHA1

    5bb738812cda16135a300c4dabec7a8710a4fce7

  • SHA256

    c00a61e7df7475cf4e2e0ab35513fa5164857df05e0528cbaffd756741c95f89

  • SHA512

    a63f3da4c15508bb98854bf6f2d64eed6812c0de2ee1e4d5446876fb9e5a4f9bfb4373c0020cd2ac849e620ff2e337e6af634e1d5ec68539b9fc966f423e41c4

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpaSwIF:bm74zYcgT/Ekn0ryfjR1IF

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_c40f23e161843044e8cb98a595087fc5_cryptolocker

    • Size

      44KB

    • MD5

      c40f23e161843044e8cb98a595087fc5

    • SHA1

      5bb738812cda16135a300c4dabec7a8710a4fce7

    • SHA256

      c00a61e7df7475cf4e2e0ab35513fa5164857df05e0528cbaffd756741c95f89

    • SHA512

      a63f3da4c15508bb98854bf6f2d64eed6812c0de2ee1e4d5446876fb9e5a4f9bfb4373c0020cd2ac849e620ff2e337e6af634e1d5ec68539b9fc966f423e41c4

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpaSwIF:bm74zYcgT/Ekn0ryfjR1IF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks