Overview

overview

10

Static

static

10

2024-06-24...er.exe

windows7-x64

9

2024-06-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-24_ce1b45a797c5e067732ca45eeae1dab0_cryptolocker

  • Size

    391KB

  • Sample

    240624-y666wsvbjk

  • MD5

    ce1b45a797c5e067732ca45eeae1dab0

  • SHA1

    92b1c7169cc3f1fa63521eaf7f296af911603fdf

  • SHA256

    341bdd5b2e6702c9e7ea05256d48b32a5fc93dcfb50ecb9b97a928f57e40a061

  • SHA512

    bdd236ad927818ee47122a9e90c0d1bc16326f1b396b22df246d7980be30141f81bc2492ed60b0a4d14a51c2067df98c4238ffe2ff706e19afbe86732098f60e

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXR3:nnOflT/ZFIjBz3xjTxynGUOUhXR3

Score
10/10

Malware Config

Targets

    • Target

      2024-06-24_ce1b45a797c5e067732ca45eeae1dab0_cryptolocker

    • Size

      391KB

    • MD5

      ce1b45a797c5e067732ca45eeae1dab0

    • SHA1

      92b1c7169cc3f1fa63521eaf7f296af911603fdf

    • SHA256

      341bdd5b2e6702c9e7ea05256d48b32a5fc93dcfb50ecb9b97a928f57e40a061

    • SHA512

      bdd236ad927818ee47122a9e90c0d1bc16326f1b396b22df246d7980be30141f81bc2492ed60b0a4d14a51c2067df98c4238ffe2ff706e19afbe86732098f60e

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXR3:nnOflT/ZFIjBz3xjTxynGUOUhXR3

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks