Overview

overview

10

Static

static

10

2024-05-27...er.exe

windows7-x64

9

2024-05-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-27_2169b999d3765f47febbb01d4889b342_cryptolocker

  • Size

    41KB

  • Sample

    240527-3crassdg9v

  • MD5

    2169b999d3765f47febbb01d4889b342

  • SHA1

    65ef237c2bf3d210809137cbb79ea864edcd45b1

  • SHA256

    6cdc0c1d0755933dda24b6570c2d81bf54b31e481d22245050c52dbaf3f6d3cc

  • SHA512

    2a5a1f608dc8537178a66fbf231b6c46a9813d2f1f3d16047b2e01386e432c88be83111e89b29fb2b587081d792905aa7ecef04e5a3e554109e5b42521740e4d

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDka:ZzFbxmLPWQMOtEvwDpjLeJAsKcN

Score
10/10

Malware Config

Targets

    • Target

      2024-05-27_2169b999d3765f47febbb01d4889b342_cryptolocker

    • Size

      41KB

    • MD5

      2169b999d3765f47febbb01d4889b342

    • SHA1

      65ef237c2bf3d210809137cbb79ea864edcd45b1

    • SHA256

      6cdc0c1d0755933dda24b6570c2d81bf54b31e481d22245050c52dbaf3f6d3cc

    • SHA512

      2a5a1f608dc8537178a66fbf231b6c46a9813d2f1f3d16047b2e01386e432c88be83111e89b29fb2b587081d792905aa7ecef04e5a3e554109e5b42521740e4d

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDka:ZzFbxmLPWQMOtEvwDpjLeJAsKcN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks