Overview

overview

10

Static

static

10

2024-02-01...er.exe

windows7-x64

9

2024-02-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-01_33a46193d158452f7cbe4a391bb0dfb0_cryptolocker

  • Size

    47KB

  • Sample

    240201-qz8gdagehk

  • MD5

    33a46193d158452f7cbe4a391bb0dfb0

  • SHA1

    aec310893ff616676d21e46d49b15f1958cedc8a

  • SHA256

    bfed4b2200f5800fa34682b3924e77e64acba051aa6b55c8f8dfc77e8dbca167

  • SHA512

    d8f8201a73ac7847e31ceff51fc1f591dca43538579358296b29b6ee26f8e09ba7fe390c7b9389b37a7139fe0067318df9eaed802c8a4ee419f11ef35dcf8ead

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaO:xj+VGMOtEvwDpjy+TO

Score
10/10

Malware Config

Targets

    • Target

      2024-02-01_33a46193d158452f7cbe4a391bb0dfb0_cryptolocker

    • Size

      47KB

    • MD5

      33a46193d158452f7cbe4a391bb0dfb0

    • SHA1

      aec310893ff616676d21e46d49b15f1958cedc8a

    • SHA256

      bfed4b2200f5800fa34682b3924e77e64acba051aa6b55c8f8dfc77e8dbca167

    • SHA512

      d8f8201a73ac7847e31ceff51fc1f591dca43538579358296b29b6ee26f8e09ba7fe390c7b9389b37a7139fe0067318df9eaed802c8a4ee419f11ef35dcf8ead

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaO:xj+VGMOtEvwDpjy+TO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks