Overview

overview

10

Static

static

10

2024-01-24...er.exe

windows7-x64

9

2024-01-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-24_565051aa18b8beb97f14d78d080d3b57_cryptolocker

  • Size

    47KB

  • Sample

    240124-gd1d7scaap

  • MD5

    565051aa18b8beb97f14d78d080d3b57

  • SHA1

    dd0b95e4005b96f6a400af2fbe07cb653d2f0e8d

  • SHA256

    783f25dbd68ae7b26fe7063b961e9d315761843b1c6dfbc4191fc72a74341eb8

  • SHA512

    825a44db36aaaa194d8569524b72441703d89a9e4576bd4ae21197aa31da5ed0aed093f9e53124926eb8ea0da59f0ba1124f3346bf3ebd11795efeb3cdc3558e

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7IVth4:XS5nQJ24LR1bytOOtEvwDpjNbP/MPQL

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_565051aa18b8beb97f14d78d080d3b57_cryptolocker

    • Size

      47KB

    • MD5

      565051aa18b8beb97f14d78d080d3b57

    • SHA1

      dd0b95e4005b96f6a400af2fbe07cb653d2f0e8d

    • SHA256

      783f25dbd68ae7b26fe7063b961e9d315761843b1c6dfbc4191fc72a74341eb8

    • SHA512

      825a44db36aaaa194d8569524b72441703d89a9e4576bd4ae21197aa31da5ed0aed093f9e53124926eb8ea0da59f0ba1124f3346bf3ebd11795efeb3cdc3558e

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7IVth4:XS5nQJ24LR1bytOOtEvwDpjNbP/MPQL

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks