Overview

overview

10

Static

static

10

2024-02-02...er.exe

windows7-x64

9

2024-02-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-02_28f5bbacfa8c1d3935057917ecf97537_cryptolocker

  • Size

    48KB

  • Sample

    240202-w2f3sseeep

  • MD5

    28f5bbacfa8c1d3935057917ecf97537

  • SHA1

    de44e8f309890df9583c5e830ed71d91a935412e

  • SHA256

    60539ebaa537855dc5c76325ffeba2a671f51b08186a1c583d5042ed75f94744

  • SHA512

    0ab952cf5905ce4a95682fda6abbdf804bf35caac5b3e254e731dd671a4c5786bac3b8ee4951cd52d5a0708cc2929010878c774678fd6ba444b36f8501d8cc73

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpzw:XS5nQJ24LR1bytOOtEvwDpjNbP/0GeE

Score
10/10

Malware Config

Targets

    • Target

      2024-02-02_28f5bbacfa8c1d3935057917ecf97537_cryptolocker

    • Size

      48KB

    • MD5

      28f5bbacfa8c1d3935057917ecf97537

    • SHA1

      de44e8f309890df9583c5e830ed71d91a935412e

    • SHA256

      60539ebaa537855dc5c76325ffeba2a671f51b08186a1c583d5042ed75f94744

    • SHA512

      0ab952cf5905ce4a95682fda6abbdf804bf35caac5b3e254e731dd671a4c5786bac3b8ee4951cd52d5a0708cc2929010878c774678fd6ba444b36f8501d8cc73

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpzw:XS5nQJ24LR1bytOOtEvwDpjNbP/0GeE

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks