Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_f8f9d04f3e8bff353594953f21fd3bc5_cryptolocker

  • Size

    41KB

  • Sample

    240126-s36hasghf2

  • MD5

    f8f9d04f3e8bff353594953f21fd3bc5

  • SHA1

    02cedfb0ab39dbdb57e78da6b95cfe77ef42d50e

  • SHA256

    2e38359e0a0010fa3fdfe756cefdcfcef8ecf5493b13f8cf851ed70f5ec4797d

  • SHA512

    569a39770bdecd0d3b9f46b084693d4ed92bc9cee7d49cd8eff682f4004dbcec768fbf8c9cd7d56ad056a0a0725ed96f5ce84fe47ccf4e411e1a10bfb639520c

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO2:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/o

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_f8f9d04f3e8bff353594953f21fd3bc5_cryptolocker

    • Size

      41KB

    • MD5

      f8f9d04f3e8bff353594953f21fd3bc5

    • SHA1

      02cedfb0ab39dbdb57e78da6b95cfe77ef42d50e

    • SHA256

      2e38359e0a0010fa3fdfe756cefdcfcef8ecf5493b13f8cf851ed70f5ec4797d

    • SHA512

      569a39770bdecd0d3b9f46b084693d4ed92bc9cee7d49cd8eff682f4004dbcec768fbf8c9cd7d56ad056a0a0725ed96f5ce84fe47ccf4e411e1a10bfb639520c

    • SSDEEP

      384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO2:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/o

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks