Overview

overview

10

Static

static

10

2024-05-25...er.exe

windows7-x64

9

2024-05-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-25_e64d75f0d54fa75fa1b8f9c421bb1744_cryptolocker

  • Size

    43KB

  • Sample

    240525-lwjxdsdd93

  • MD5

    e64d75f0d54fa75fa1b8f9c421bb1744

  • SHA1

    929e7f3a52a29a4a37f370cadb6fdc9ca5ba9038

  • SHA256

    485892f3304bd66d795a49c914ac8a8ec66944b4bc8a2ffce021f9702d79d927

  • SHA512

    f438d8b5f87eed82f4ab9595b899ec301fdbf26c88af71c2a026bc01588daecbfc73e38f2979be3d1f96db308358c7c002a6a04af870fa2692a16ae0a0922b10

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIQ:bm74zYcgT/Ekn0ryfjc

Score
10/10

Malware Config

Targets

    • Target

      2024-05-25_e64d75f0d54fa75fa1b8f9c421bb1744_cryptolocker

    • Size

      43KB

    • MD5

      e64d75f0d54fa75fa1b8f9c421bb1744

    • SHA1

      929e7f3a52a29a4a37f370cadb6fdc9ca5ba9038

    • SHA256

      485892f3304bd66d795a49c914ac8a8ec66944b4bc8a2ffce021f9702d79d927

    • SHA512

      f438d8b5f87eed82f4ab9595b899ec301fdbf26c88af71c2a026bc01588daecbfc73e38f2979be3d1f96db308358c7c002a6a04af870fa2692a16ae0a0922b10

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIQ:bm74zYcgT/Ekn0ryfjc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks