Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_97a7836505219a7368366751696a722d_cryptolocker

  • Size

    61KB

  • Sample

    240129-at1atafeck

  • MD5

    97a7836505219a7368366751696a722d

  • SHA1

    cffa3878a135e6994c3c411896eb293c12eef505

  • SHA256

    1362673489effc26bf7a1a6c700f0d26fdfda2c99868b1fbb986f3da040fb00d

  • SHA512

    007a252f659879ff3841008b7c7199af3fc73054d3e8c845a8067e97372dd4af6640cc96367ed234e7aaa0fd6e9d96b5486d6bc73aefce44be0f1525d28fd94d

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10UARJ:6j+1NMOtEvwDpjr8ox8UDEy0xRJ

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_97a7836505219a7368366751696a722d_cryptolocker

    • Size

      61KB

    • MD5

      97a7836505219a7368366751696a722d

    • SHA1

      cffa3878a135e6994c3c411896eb293c12eef505

    • SHA256

      1362673489effc26bf7a1a6c700f0d26fdfda2c99868b1fbb986f3da040fb00d

    • SHA512

      007a252f659879ff3841008b7c7199af3fc73054d3e8c845a8067e97372dd4af6640cc96367ed234e7aaa0fd6e9d96b5486d6bc73aefce44be0f1525d28fd94d

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10UARJ:6j+1NMOtEvwDpjr8ox8UDEy0xRJ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks