Overview

overview

10

Static

static

10

2024-06-08...er.exe

windows7-x64

9

2024-06-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-08_d2af4903edc10729ee464f636e2eead4_cryptolocker

  • Size

    49KB

  • Sample

    240608-3kpryaah29

  • MD5

    d2af4903edc10729ee464f636e2eead4

  • SHA1

    c8f2845a41b89707b4b5773d59c8cf67f82061ba

  • SHA256

    530e5f17ce53290aa48dd56e6117c185f51846b60a36f7c78b1c0a0dba324496

  • SHA512

    07c14abb935a374e412a2094419a41a1d5678e41276d3e4d5c152a026f43be1061c9caa0737daf3f65cc4bd528ae62098a20e07618f8b3bfbd06342bd1d7ebb8

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoAn:qmbhXDmjr5MOtEvwDpj5cDtKkQZQS

Score
10/10

Malware Config

Targets

    • Target

      2024-06-08_d2af4903edc10729ee464f636e2eead4_cryptolocker

    • Size

      49KB

    • MD5

      d2af4903edc10729ee464f636e2eead4

    • SHA1

      c8f2845a41b89707b4b5773d59c8cf67f82061ba

    • SHA256

      530e5f17ce53290aa48dd56e6117c185f51846b60a36f7c78b1c0a0dba324496

    • SHA512

      07c14abb935a374e412a2094419a41a1d5678e41276d3e4d5c152a026f43be1061c9caa0737daf3f65cc4bd528ae62098a20e07618f8b3bfbd06342bd1d7ebb8

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoAn:qmbhXDmjr5MOtEvwDpj5cDtKkQZQS

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks