Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-18_05c1cc82fda0cb4e220eba3bda39212f_cryptolocker

  • Size

    46KB

  • Sample

    240118-nvl2gabdf7

  • MD5

    05c1cc82fda0cb4e220eba3bda39212f

  • SHA1

    20d2f3589572e4f228ed4e74dec955caa2727e50

  • SHA256

    9d2a11e45bc6f2cc2bd70ff02bf41f8fb92fe351de0ee947f844f5a9d79c41da

  • SHA512

    e1edf4ec02a958f29bcf087d5f0f79fcecbb3560713a96068bbc5a20e44f92126fa578c7c5a3988cc705e85fdccfd657eb3c6e06a94540c6f5599d6d5e6265d2

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7IVtM:XS5nQJ24LR1bytOOtEvwDpjNbP/MPM

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_05c1cc82fda0cb4e220eba3bda39212f_cryptolocker

    • Size

      46KB

    • MD5

      05c1cc82fda0cb4e220eba3bda39212f

    • SHA1

      20d2f3589572e4f228ed4e74dec955caa2727e50

    • SHA256

      9d2a11e45bc6f2cc2bd70ff02bf41f8fb92fe351de0ee947f844f5a9d79c41da

    • SHA512

      e1edf4ec02a958f29bcf087d5f0f79fcecbb3560713a96068bbc5a20e44f92126fa578c7c5a3988cc705e85fdccfd657eb3c6e06a94540c6f5599d6d5e6265d2

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7IVtM:XS5nQJ24LR1bytOOtEvwDpjNbP/MPM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks