Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_5f46b0dde10591c935dde74da0f2eec0_cryptolocker

  • Size

    56KB

  • Sample

    240126-jq1lvaaecj

  • MD5

    5f46b0dde10591c935dde74da0f2eec0

  • SHA1

    a1bda6ebc8ffd8e4cf959f415a4d0c15789289ba

  • SHA256

    85df8772183f2dd3a4eeb94c974e3b26063ba13ce6486806ed783915daacda9b

  • SHA512

    41e333b518e87b347e34a5e8609d69ab9b497e6afff3bf47e0abf07048976a52a6b2c9871f2b5d75a2bbb1c65bbe6b761bc1f0324713feb001ada8bfdac869d6

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Gowfju:xj+VGMOtEvwDpjubEgc

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_5f46b0dde10591c935dde74da0f2eec0_cryptolocker

    • Size

      56KB

    • MD5

      5f46b0dde10591c935dde74da0f2eec0

    • SHA1

      a1bda6ebc8ffd8e4cf959f415a4d0c15789289ba

    • SHA256

      85df8772183f2dd3a4eeb94c974e3b26063ba13ce6486806ed783915daacda9b

    • SHA512

      41e333b518e87b347e34a5e8609d69ab9b497e6afff3bf47e0abf07048976a52a6b2c9871f2b5d75a2bbb1c65bbe6b761bc1f0324713feb001ada8bfdac869d6

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Gowfju:xj+VGMOtEvwDpjubEgc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks