Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-03_dfa9e706e05ca3df4587ec06dbe29326_cryptolocker

  • Size

    63KB

  • Sample

    240203-ehhzlsbadj

  • MD5

    dfa9e706e05ca3df4587ec06dbe29326

  • SHA1

    ba7068f77ac03d25434ea4d506b9314e87024a7a

  • SHA256

    218a812b3ae94f4eff825dbaac859fb213da87dc95d39403973e1daa170b140b

  • SHA512

    91a2f5bc6fd64582bdb2ac2ef3d0ac9b2ca47fed09b1d0b85ffc9b56be6904e453f16273dc50a867b0e6328684a45da097b5174fa40d969d300cd29ba1d7d746

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPIc:6j+1NMOtEvwDpjr8ox8UDEpuha8PIc

Score
10/10

Malware Config

Targets

    • Target

      2024-02-03_dfa9e706e05ca3df4587ec06dbe29326_cryptolocker

    • Size

      63KB

    • MD5

      dfa9e706e05ca3df4587ec06dbe29326

    • SHA1

      ba7068f77ac03d25434ea4d506b9314e87024a7a

    • SHA256

      218a812b3ae94f4eff825dbaac859fb213da87dc95d39403973e1daa170b140b

    • SHA512

      91a2f5bc6fd64582bdb2ac2ef3d0ac9b2ca47fed09b1d0b85ffc9b56be6904e453f16273dc50a867b0e6328684a45da097b5174fa40d969d300cd29ba1d7d746

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPIc:6j+1NMOtEvwDpjr8ox8UDEpuha8PIc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks