Overview

overview

10

Static

static

10

2024-02-01...er.exe

windows7-x64

9

2024-02-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-01_89835e3841a8666b7d1cd6ac7020e0b0_cryptolocker

  • Size

    41KB

  • Sample

    240201-lm3yxabfhp

  • MD5

    89835e3841a8666b7d1cd6ac7020e0b0

  • SHA1

    d4f80ab90f36840812bdb317b7f4baf6eaf98108

  • SHA256

    cde47e569e642b1b91d8d1f0959e26025b9862c53a6261dd9c537d2ea17da93d

  • SHA512

    3534f4dedc4ce01dfcecfd397810ff487fdb0fd77ae21bf6ca74ae4cb2ee57c39e2d4877ecbdc9e5f251791ef62b161d94b4f74a29f59d0537df4ff60575d11b

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOp:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/L

Score
10/10

Malware Config

Targets

    • Target

      2024-02-01_89835e3841a8666b7d1cd6ac7020e0b0_cryptolocker

    • Size

      41KB

    • MD5

      89835e3841a8666b7d1cd6ac7020e0b0

    • SHA1

      d4f80ab90f36840812bdb317b7f4baf6eaf98108

    • SHA256

      cde47e569e642b1b91d8d1f0959e26025b9862c53a6261dd9c537d2ea17da93d

    • SHA512

      3534f4dedc4ce01dfcecfd397810ff487fdb0fd77ae21bf6ca74ae4cb2ee57c39e2d4877ecbdc9e5f251791ef62b161d94b4f74a29f59d0537df4ff60575d11b

    • SSDEEP

      384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOp:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/L

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks