Overview

overview

10

Static

static

10

2024-06-04...er.exe

windows7-x64

9

2024-06-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-04_9370a9c656e08f913ae458212025b8c1_cryptolocker

  • Size

    50KB

  • Sample

    240604-xn9nmaha42

  • MD5

    9370a9c656e08f913ae458212025b8c1

  • SHA1

    8d6688706b3cb868719b0666e1da3915978b4c7b

  • SHA256

    61c51af528f952937d554ef151bf8cb46964520e6a3c35d0b14d3a5fa80484d1

  • SHA512

    c44b0fa8bc990ef3724477b7530f8e24bc91f5e98b99a6499019ec2f517329c85525d45a48219f16c565821f7fb2f6c4504f9cc8df4e9b741e646fbbb2045537

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Mocca:qmbhXDmjr5MOtEvwDpj5cDtKkQZQQf

Score
10/10

Malware Config

Targets

    • Target

      2024-06-04_9370a9c656e08f913ae458212025b8c1_cryptolocker

    • Size

      50KB

    • MD5

      9370a9c656e08f913ae458212025b8c1

    • SHA1

      8d6688706b3cb868719b0666e1da3915978b4c7b

    • SHA256

      61c51af528f952937d554ef151bf8cb46964520e6a3c35d0b14d3a5fa80484d1

    • SHA512

      c44b0fa8bc990ef3724477b7530f8e24bc91f5e98b99a6499019ec2f517329c85525d45a48219f16c565821f7fb2f6c4504f9cc8df4e9b741e646fbbb2045537

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Mocca:qmbhXDmjr5MOtEvwDpj5cDtKkQZQQf

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks