Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-28_1ba66a8e239ab75c87dcf4ce8dc7217c_cryptolocker

  • Size

    57KB

  • Sample

    240128-ka5fjaegf4

  • MD5

    1ba66a8e239ab75c87dcf4ce8dc7217c

  • SHA1

    6c83c9e121e7dc38286657be8c9430381c5c594e

  • SHA256

    cafe6bc147468b2b0a968eddf61890d82e042cc432c2381f242163f4f1cb302f

  • SHA512

    90ba26e2a0d8c3e0cf415e09caa6d5f7d7d6eb1f4e45a4529f36bc5139650c581af45d46bb03bda581d7c572f5ee4085ce28634f39d5db1a03ae8e91d303b578

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20HVeDgvT:xj+VGMOtEvwDpjubEgV20t

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_1ba66a8e239ab75c87dcf4ce8dc7217c_cryptolocker

    • Size

      57KB

    • MD5

      1ba66a8e239ab75c87dcf4ce8dc7217c

    • SHA1

      6c83c9e121e7dc38286657be8c9430381c5c594e

    • SHA256

      cafe6bc147468b2b0a968eddf61890d82e042cc432c2381f242163f4f1cb302f

    • SHA512

      90ba26e2a0d8c3e0cf415e09caa6d5f7d7d6eb1f4e45a4529f36bc5139650c581af45d46bb03bda581d7c572f5ee4085ce28634f39d5db1a03ae8e91d303b578

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20HVeDgvT:xj+VGMOtEvwDpjubEgV20t

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks