Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_a6a2d62419799b40130616ff394bef27_cryptolocker

  • Size

    38KB

  • Sample

    240125-nmyejaegb4

  • MD5

    a6a2d62419799b40130616ff394bef27

  • SHA1

    7a8e5a8ed11574622868d04b026013f50d453699

  • SHA256

    6b6e7a8974ec99f6ef37f1b33715764f473aa332bef160e2fa2cfe30561e031c

  • SHA512

    c66b8372a58cb7a72ded68e57f3c49654e42ebf9302aa5522df00793e9d3cb2c1cbc3f1d3ddc2c51abd4223b1f2987c38fb8a07dc7b7b4ed584d51a9e31ca302

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRj:m5nkFNMOtEvwDpjG8hhXx

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_a6a2d62419799b40130616ff394bef27_cryptolocker

    • Size

      38KB

    • MD5

      a6a2d62419799b40130616ff394bef27

    • SHA1

      7a8e5a8ed11574622868d04b026013f50d453699

    • SHA256

      6b6e7a8974ec99f6ef37f1b33715764f473aa332bef160e2fa2cfe30561e031c

    • SHA512

      c66b8372a58cb7a72ded68e57f3c49654e42ebf9302aa5522df00793e9d3cb2c1cbc3f1d3ddc2c51abd4223b1f2987c38fb8a07dc7b7b4ed584d51a9e31ca302

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRj:m5nkFNMOtEvwDpjG8hhXx

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks