Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_d12efb147af04a3b75524ad075328518_cryptolocker

  • Size

    37KB

  • Sample

    240126-1m1wwafab7

  • MD5

    d12efb147af04a3b75524ad075328518

  • SHA1

    7da3510fcf2778e91cf34dc01c49083368f490a7

  • SHA256

    f8cd9c70497350d3e63d83c586ec5075dfd3ac4d78dd823da9d24db4c6c5a5d0

  • SHA512

    4041401f4d43ecde1233ae795321b77b968714f792697f7ae588bbbc0f6296338cc67725bd36516cc7ed1714ab936688ac3f03cee8be141329a1aac0b2b19beb

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/y7:i5nkFGMOtEvwDpjR+viM

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_d12efb147af04a3b75524ad075328518_cryptolocker

    • Size

      37KB

    • MD5

      d12efb147af04a3b75524ad075328518

    • SHA1

      7da3510fcf2778e91cf34dc01c49083368f490a7

    • SHA256

      f8cd9c70497350d3e63d83c586ec5075dfd3ac4d78dd823da9d24db4c6c5a5d0

    • SHA512

      4041401f4d43ecde1233ae795321b77b968714f792697f7ae588bbbc0f6296338cc67725bd36516cc7ed1714ab936688ac3f03cee8be141329a1aac0b2b19beb

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/y7:i5nkFGMOtEvwDpjR+viM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks