Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_265c5680cf838db27fade2004a972304_cryptolocker

  • Size

    40KB

  • Sample

    240204-kapebaffap

  • MD5

    265c5680cf838db27fade2004a972304

  • SHA1

    5e362c4fcfe672ac8195903935265a6e30432fda

  • SHA256

    e87db129aaa94ab666280f9d83f30f43c213e9a1ed1fc923f63c268616e98002

  • SHA512

    620940f4f8966a2351ea839e0224f70eff1b26ce4f5374d31019db15247396705f4ce8e02ac047833a2939a62fb013492afa74b5dfe908f6d8fcca176c487bbf

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnI1:m5nkFNMOtEvwDpjG8hgpI

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_265c5680cf838db27fade2004a972304_cryptolocker

    • Size

      40KB

    • MD5

      265c5680cf838db27fade2004a972304

    • SHA1

      5e362c4fcfe672ac8195903935265a6e30432fda

    • SHA256

      e87db129aaa94ab666280f9d83f30f43c213e9a1ed1fc923f63c268616e98002

    • SHA512

      620940f4f8966a2351ea839e0224f70eff1b26ce4f5374d31019db15247396705f4ce8e02ac047833a2939a62fb013492afa74b5dfe908f6d8fcca176c487bbf

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnI1:m5nkFNMOtEvwDpjG8hgpI

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks