Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-28_ace0cc0ec8039fbfc4b7a0dce9dc33da_cryptolocker

  • Size

    37KB

  • Sample

    240128-f9amzscdd6

  • MD5

    ace0cc0ec8039fbfc4b7a0dce9dc33da

  • SHA1

    3d0b78bca5d319bad9a4b7822e8bf398fa7c5320

  • SHA256

    22757cd2ec5f86a4478d5722821d85f7179a9b9b6ac360d45a3b8f21a00fb165

  • SHA512

    17e97757be1bffa987e571edf1feef3e382ae0678cec6f6114146af4c64b562e84e994da89c3ceabc3ea31985da4fd21daddd3fc3e53bac74425b9e19fa86681

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9RvNI:i5nkFGMOtEvwDpjR+FI

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_ace0cc0ec8039fbfc4b7a0dce9dc33da_cryptolocker

    • Size

      37KB

    • MD5

      ace0cc0ec8039fbfc4b7a0dce9dc33da

    • SHA1

      3d0b78bca5d319bad9a4b7822e8bf398fa7c5320

    • SHA256

      22757cd2ec5f86a4478d5722821d85f7179a9b9b6ac360d45a3b8f21a00fb165

    • SHA512

      17e97757be1bffa987e571edf1feef3e382ae0678cec6f6114146af4c64b562e84e994da89c3ceabc3ea31985da4fd21daddd3fc3e53bac74425b9e19fa86681

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9RvNI:i5nkFGMOtEvwDpjR+FI

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks