Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_3283f6401f902ffb560b68c0e24922e1_cryptolocker

  • Size

    52KB

  • Sample

    240127-tw61xshear

  • MD5

    3283f6401f902ffb560b68c0e24922e1

  • SHA1

    4bb0f4b08f6ec5d24237292a5190672b493252b4

  • SHA256

    125e9d7659a3ee87e4b5859aa63c28c08ac0d45d6c25ade46b26a56274db8c32

  • SHA512

    4cf5a5409e2600e208b8c901b0f85dec066e040a8e1213f1eb758c4d34c74ae701e8b02c816a1c7e9c10d193f018427e97b4465380d6abb5f022eb6f72201f62

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7+:6j+1NMOtEvwDpjr8oxEc

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_3283f6401f902ffb560b68c0e24922e1_cryptolocker

    • Size

      52KB

    • MD5

      3283f6401f902ffb560b68c0e24922e1

    • SHA1

      4bb0f4b08f6ec5d24237292a5190672b493252b4

    • SHA256

      125e9d7659a3ee87e4b5859aa63c28c08ac0d45d6c25ade46b26a56274db8c32

    • SHA512

      4cf5a5409e2600e208b8c901b0f85dec066e040a8e1213f1eb758c4d34c74ae701e8b02c816a1c7e9c10d193f018427e97b4465380d6abb5f022eb6f72201f62

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7+:6j+1NMOtEvwDpjr8oxEc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks