Overview

overview

10

Static

static

10

2024-01-24...er.exe

windows7-x64

9

2024-01-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-24_bbb020ed61ccadf17334d01beecc7f0a_cryptolocker

  • Size

    38KB

  • Sample

    240124-jlvj2adbcn

  • MD5

    bbb020ed61ccadf17334d01beecc7f0a

  • SHA1

    fe6e2d95ff8dc4341e8c7280ac3e5ae4f6a54e16

  • SHA256

    ea42829513536a53372651012e163fddc2bb232996207c5e5f76540b1a0bd3e7

  • SHA512

    6c79fc9c14189813be0adbe9f356f7157320086f9180b8318964f34a3e06b8b13c8e5f7361819fdf3ee2d4b227d5467f39e002143982ef2296a96e2c5c18f5a6

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh67/K:6j+1NMOtEvwDpjrRbK

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_bbb020ed61ccadf17334d01beecc7f0a_cryptolocker

    • Size

      38KB

    • MD5

      bbb020ed61ccadf17334d01beecc7f0a

    • SHA1

      fe6e2d95ff8dc4341e8c7280ac3e5ae4f6a54e16

    • SHA256

      ea42829513536a53372651012e163fddc2bb232996207c5e5f76540b1a0bd3e7

    • SHA512

      6c79fc9c14189813be0adbe9f356f7157320086f9180b8318964f34a3e06b8b13c8e5f7361819fdf3ee2d4b227d5467f39e002143982ef2296a96e2c5c18f5a6

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh67/K:6j+1NMOtEvwDpjrRbK

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks