Overview

overview

10

Static

static

10

2024-01-24...er.exe

windows7-x64

9

2024-01-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-24_aedead16ce218cd26d0d5884f2dfcaab_cryptolocker

  • Size

    57KB

  • Sample

    240124-prkvnsacbm

  • MD5

    aedead16ce218cd26d0d5884f2dfcaab

  • SHA1

    44037aad39cbabab3d815150021b927b78d6f2ce

  • SHA256

    a97d1ce3f844cc2d1a4e9c7984e82a3e7ecb544533b3485f603dc982133c1160

  • SHA512

    a277281d198b297311f31de58e7aec5a7269fea530d367a23e3f0e3169019fb7f9442bed1462072e179f4132b512275252ad6582c50a1d8ed7cbb4d737d123d0

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFwQ:xj+VGMOtEvwDpjubEgywQ

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_aedead16ce218cd26d0d5884f2dfcaab_cryptolocker

    • Size

      57KB

    • MD5

      aedead16ce218cd26d0d5884f2dfcaab

    • SHA1

      44037aad39cbabab3d815150021b927b78d6f2ce

    • SHA256

      a97d1ce3f844cc2d1a4e9c7984e82a3e7ecb544533b3485f603dc982133c1160

    • SHA512

      a277281d198b297311f31de58e7aec5a7269fea530d367a23e3f0e3169019fb7f9442bed1462072e179f4132b512275252ad6582c50a1d8ed7cbb4d737d123d0

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFwQ:xj+VGMOtEvwDpjubEgywQ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks