Overview

overview

10

Static

static

10

2024-06-06...er.exe

windows7-x64

9

2024-06-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-06_e51c6de523354066189d9e48a4c0af9a_cryptolocker

  • Size

    51KB

  • Sample

    240606-sdwa2agf96

  • MD5

    e51c6de523354066189d9e48a4c0af9a

  • SHA1

    ca6d7b38e41abc29876aecbcf033caef5f464fae

  • SHA256

    f7165a29854c9e3d0392c4c4d11e0a230caf11f5e87e1b2ca8a3bfbc5cb85550

  • SHA512

    ff52d4047ab4bbae0edf893e34d1c04780135bd16db0757c901ecf8021b5013972584a7f27f8dfd1bb8c8aa78ac9d504867fbc2b0e38a7554e2d2ee110ad22f0

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoccU:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ+

Score
10/10

Malware Config

Targets

    • Target

      2024-06-06_e51c6de523354066189d9e48a4c0af9a_cryptolocker

    • Size

      51KB

    • MD5

      e51c6de523354066189d9e48a4c0af9a

    • SHA1

      ca6d7b38e41abc29876aecbcf033caef5f464fae

    • SHA256

      f7165a29854c9e3d0392c4c4d11e0a230caf11f5e87e1b2ca8a3bfbc5cb85550

    • SHA512

      ff52d4047ab4bbae0edf893e34d1c04780135bd16db0757c901ecf8021b5013972584a7f27f8dfd1bb8c8aa78ac9d504867fbc2b0e38a7554e2d2ee110ad22f0

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoccU:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ+

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks