Overview

overview

10

Static

static

10

2024-01-23...er.exe

windows7-x64

9

2024-01-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-23_a35adc92d99e2267bbd95856c38ae185_cryptolocker

  • Size

    56KB

  • Sample

    240123-t1vtfsdaf2

  • MD5

    a35adc92d99e2267bbd95856c38ae185

  • SHA1

    837abc38c5c59c78dba33987e105395029b2f881

  • SHA256

    873e2e3f152669eb663fdbafdafbc9d1d0418353424d7e536d9b39ebb739413b

  • SHA512

    8a9d8b467b04261c855c54a88c5824960afc013350effe6af5068e784d439bb46ba056757f0f9083fe7f64f49f4a4604e02b7aadf369c9e1938b16127b10ff18

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20HVe5:xj+VGMOtEvwDpjubEgV20C

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_a35adc92d99e2267bbd95856c38ae185_cryptolocker

    • Size

      56KB

    • MD5

      a35adc92d99e2267bbd95856c38ae185

    • SHA1

      837abc38c5c59c78dba33987e105395029b2f881

    • SHA256

      873e2e3f152669eb663fdbafdafbc9d1d0418353424d7e536d9b39ebb739413b

    • SHA512

      8a9d8b467b04261c855c54a88c5824960afc013350effe6af5068e784d439bb46ba056757f0f9083fe7f64f49f4a4604e02b7aadf369c9e1938b16127b10ff18

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20HVe5:xj+VGMOtEvwDpjubEgV20C

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks