Overview

overview

10

Static

static

10

2024-05-28...er.exe

windows7-x64

9

2024-05-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-28_5d7cd8b795caadd83cf2679c2df63ddd_cryptolocker

  • Size

    32KB

  • Sample

    240528-x4e4ysaa49

  • MD5

    5d7cd8b795caadd83cf2679c2df63ddd

  • SHA1

    f85bf2752f8701e4b061998918bdd83912b8009f

  • SHA256

    d7879db9e8b2d887ce13f78c41492be163343f5d38a8ef1326486fdd89e839df

  • SHA512

    262ad755e25d4f3979542098030d822a6bcf4b1a66ae7172dc8407275b5ffd7497684cb4c5727336081f9d66cf0a88d3f707b385f4fc2e6666d0ea8ba5769766

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7sqT:bAvJCYOOvbRPDEgXRcJwqT

Score
10/10

Malware Config

Targets

    • Target

      2024-05-28_5d7cd8b795caadd83cf2679c2df63ddd_cryptolocker

    • Size

      32KB

    • MD5

      5d7cd8b795caadd83cf2679c2df63ddd

    • SHA1

      f85bf2752f8701e4b061998918bdd83912b8009f

    • SHA256

      d7879db9e8b2d887ce13f78c41492be163343f5d38a8ef1326486fdd89e839df

    • SHA512

      262ad755e25d4f3979542098030d822a6bcf4b1a66ae7172dc8407275b5ffd7497684cb4c5727336081f9d66cf0a88d3f707b385f4fc2e6666d0ea8ba5769766

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7sqT:bAvJCYOOvbRPDEgXRcJwqT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks