Overview

overview

10

Static

static

10

2024-06-20...er.exe

windows7-x64

9

2024-06-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-20_21d074945181470a5ca757347ebcf259_cryptolocker

  • Size

    45KB

  • Sample

    240620-ez3qcashpk

  • MD5

    21d074945181470a5ca757347ebcf259

  • SHA1

    0b24f6014145d766694db5417e832d786e99b3ec

  • SHA256

    882847badeb49de81c73a05a3e7d109687f12c2489bfd5ed0a63dd1fcb3d3936

  • SHA512

    d19341bdd92aeeb53d3ced6b09347f647700ac9d86ef8d0ef3d99398b4a9dde5764eb9f6fd0320a8a194d70e973f09cd70e3483b867769215f8ef4c18ab85a59

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3b+NJ:bm74zYcgT/EkM0ryfjd3WJ

Score
10/10

Malware Config

Targets

    • Target

      2024-06-20_21d074945181470a5ca757347ebcf259_cryptolocker

    • Size

      45KB

    • MD5

      21d074945181470a5ca757347ebcf259

    • SHA1

      0b24f6014145d766694db5417e832d786e99b3ec

    • SHA256

      882847badeb49de81c73a05a3e7d109687f12c2489bfd5ed0a63dd1fcb3d3936

    • SHA512

      d19341bdd92aeeb53d3ced6b09347f647700ac9d86ef8d0ef3d99398b4a9dde5764eb9f6fd0320a8a194d70e973f09cd70e3483b867769215f8ef4c18ab85a59

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3b+NJ:bm74zYcgT/EkM0ryfjd3WJ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks