Overview

overview

10

Static

static

10

2024-06-01...er.exe

windows7-x64

9

2024-06-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-01_21ff02cb738fc4fb505c807caa725497_cryptolocker

  • Size

    45KB

  • Sample

    240601-sxsn9agc52

  • MD5

    21ff02cb738fc4fb505c807caa725497

  • SHA1

    3bbfc52ff97c8f4a2dfcda3ea441eb9f49e04c22

  • SHA256

    896d6b983378b885365a1f29c54eefa10cb78ec8f2a108d8d643768f77c0ac03

  • SHA512

    a166556f609d554ac0798aae6e359ec71a80456379c2c09a0af7b86cc18dbc6d10d6ee52b9477bdc5351a534ce46e6fcd8f1f64c1b805407c48c9269c1280ff5

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDa8wy:bm74zYcgT/Ekn0ryfjvaxy

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_21ff02cb738fc4fb505c807caa725497_cryptolocker

    • Size

      45KB

    • MD5

      21ff02cb738fc4fb505c807caa725497

    • SHA1

      3bbfc52ff97c8f4a2dfcda3ea441eb9f49e04c22

    • SHA256

      896d6b983378b885365a1f29c54eefa10cb78ec8f2a108d8d643768f77c0ac03

    • SHA512

      a166556f609d554ac0798aae6e359ec71a80456379c2c09a0af7b86cc18dbc6d10d6ee52b9477bdc5351a534ce46e6fcd8f1f64c1b805407c48c9269c1280ff5

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDa8wy:bm74zYcgT/Ekn0ryfjvaxy

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks