Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_82cb159d2b0feef98f25dcf361b043b3_cryptolocker

  • Size

    84KB

  • Sample

    240204-mlme7sfcd5

  • MD5

    82cb159d2b0feef98f25dcf361b043b3

  • SHA1

    9b047a64012d4576e50cf9a2a77dc682d0187570

  • SHA256

    1266c3cd5649163317405198bc8eeae65e7130fe508375057968bbd0f10fc1ee

  • SHA512

    53b945f6378feaedf50c81eba72d39f040942b294f12d244539dfcaa36bbbf1499637f77040e44dfbae233ea27dc4e83d6c62967160f4ad8c24fc39a1432cf91

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP20f7:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Fj

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_82cb159d2b0feef98f25dcf361b043b3_cryptolocker

    • Size

      84KB

    • MD5

      82cb159d2b0feef98f25dcf361b043b3

    • SHA1

      9b047a64012d4576e50cf9a2a77dc682d0187570

    • SHA256

      1266c3cd5649163317405198bc8eeae65e7130fe508375057968bbd0f10fc1ee

    • SHA512

      53b945f6378feaedf50c81eba72d39f040942b294f12d244539dfcaa36bbbf1499637f77040e44dfbae233ea27dc4e83d6c62967160f4ad8c24fc39a1432cf91

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP20f7:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Fj

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks