Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_c32a6aab38794db58b44748a87822a6f_cryptolocker

  • Size

    62KB

  • Sample

    240125-npa21sffcq

  • MD5

    c32a6aab38794db58b44748a87822a6f

  • SHA1

    573fbb0f2ebdff838d72116c5fcdcfa7ac987e0b

  • SHA256

    e8117962a8feaa094bd9783ec6618c76b4483e8032af750894beba6e903f66e5

  • SHA512

    359839fc97476d093100cfae3e3f132febc217576e82efb0657ee337ebd94fcca8af31e2a69d533647483540445dd0706ef3ed77cb902a9d9177d9b61edbb6f7

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEM5:6j+1NMOtEvwDpjr8ox8UDEw

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_c32a6aab38794db58b44748a87822a6f_cryptolocker

    • Size

      62KB

    • MD5

      c32a6aab38794db58b44748a87822a6f

    • SHA1

      573fbb0f2ebdff838d72116c5fcdcfa7ac987e0b

    • SHA256

      e8117962a8feaa094bd9783ec6618c76b4483e8032af750894beba6e903f66e5

    • SHA512

      359839fc97476d093100cfae3e3f132febc217576e82efb0657ee337ebd94fcca8af31e2a69d533647483540445dd0706ef3ed77cb902a9d9177d9b61edbb6f7

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEM5:6j+1NMOtEvwDpjr8ox8UDEw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks