Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-03_245c8129d17555a3d14436866e6cefc7_cryptolocker

  • Size

    63KB

  • Sample

    240203-aprswaceh2

  • MD5

    245c8129d17555a3d14436866e6cefc7

  • SHA1

    b521331d2e506880db1d667dd135b215607c3b68

  • SHA256

    09bf889f473f63751b85d8a53a7301217a846f200da93bf737e035f4e7ade2b5

  • SHA512

    10648a5c098dc41e9d64c761b80029b19d612bc1b03c0b85a4693b5cdc8af55c1a187a087da3c5bc54bfdb30044a602f630847c08b6a9ef801ddfa85e1b3f462

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPINx:6j+1NMOtEvwDpjr8ox8UDEpuha8PINx

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_245c8129d17555a3d14436866e6cefc7_cryptolocker

    • Size

      63KB

    • MD5

      245c8129d17555a3d14436866e6cefc7

    • SHA1

      b521331d2e506880db1d667dd135b215607c3b68

    • SHA256

      09bf889f473f63751b85d8a53a7301217a846f200da93bf737e035f4e7ade2b5

    • SHA512

      10648a5c098dc41e9d64c761b80029b19d612bc1b03c0b85a4693b5cdc8af55c1a187a087da3c5bc54bfdb30044a602f630847c08b6a9ef801ddfa85e1b3f462

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPINx:6j+1NMOtEvwDpjr8ox8UDEpuha8PINx

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks