Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-27_0cb8ebd1eb7399f6b84922baf0322765_cryptolocker

  • Size

    62KB

  • Sample

    240127-h7cqnsffd4

  • MD5

    0cb8ebd1eb7399f6b84922baf0322765

  • SHA1

    e880be8f6460795a326e8aa1aaa3eb4dc7eeb5f2

  • SHA256

    96f856f4f92cded43f8d27003b39816bdfe9281254d4296a5e85d1a26ebdc42f

  • SHA512

    48478a2d21974f13038b1081fa38f01060c174efa4bf563098f6c92238ad20570ec58510c300b51058be8a47be4ae4e3ea78b467074e81f47bba70b5ceecedb6

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10Km2:6j+1NMOtEvwDpjr8ox8UDEy0Km2

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_0cb8ebd1eb7399f6b84922baf0322765_cryptolocker

    • Size

      62KB

    • MD5

      0cb8ebd1eb7399f6b84922baf0322765

    • SHA1

      e880be8f6460795a326e8aa1aaa3eb4dc7eeb5f2

    • SHA256

      96f856f4f92cded43f8d27003b39816bdfe9281254d4296a5e85d1a26ebdc42f

    • SHA512

      48478a2d21974f13038b1081fa38f01060c174efa4bf563098f6c92238ad20570ec58510c300b51058be8a47be4ae4e3ea78b467074e81f47bba70b5ceecedb6

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10Km2:6j+1NMOtEvwDpjr8ox8UDEy0Km2

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks