Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_e318ac004ea90252a9c2594efbdd33d5_cryptolocker

  • Size

    53KB

  • Sample

    240126-t2ztssbcgj

  • MD5

    e318ac004ea90252a9c2594efbdd33d5

  • SHA1

    bea2e649089e28e6b454064a0af7bce2a0f9aa96

  • SHA256

    1519f05066cb814363a7eebe5bb64005f539fde891810d26fcd2dd5652979573

  • SHA512

    521fb84aa58225a72940979d54138a5d7ee55771c594896de27cad858ab27dd733962783b78557c3a3ac8e222ad074b8d7cb6e3d331214fcf79b905893410fc5

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7W4:6j+1NMOtEvwDpjr8oxEj

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_e318ac004ea90252a9c2594efbdd33d5_cryptolocker

    • Size

      53KB

    • MD5

      e318ac004ea90252a9c2594efbdd33d5

    • SHA1

      bea2e649089e28e6b454064a0af7bce2a0f9aa96

    • SHA256

      1519f05066cb814363a7eebe5bb64005f539fde891810d26fcd2dd5652979573

    • SHA512

      521fb84aa58225a72940979d54138a5d7ee55771c594896de27cad858ab27dd733962783b78557c3a3ac8e222ad074b8d7cb6e3d331214fcf79b905893410fc5

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7W4:6j+1NMOtEvwDpjr8oxEj

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks