Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-12_6629fc4184cca22870958bd588d34d55_cryptolocker

  • Size

    65KB

  • Sample

    240212-ge125aff63

  • MD5

    6629fc4184cca22870958bd588d34d55

  • SHA1

    79a6307ab2b3884772621818eeaf7bf6e388154e

  • SHA256

    5a219f0780c6f3f2c3a7eb8fb8220818ed0fe06344cf02ba105edf326d395e64

  • SHA512

    0730bdd053797d98455f38475087238e9cba584f44cfa39bb0885542acc765f71d4026ae5ec035c4d3b8e7ddaec747b70ffee3a84cc7ea55d7ced3f35c07b3dd

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsY/:i5nkFGMOtEvwDpjNbwQEI8UZ/

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_6629fc4184cca22870958bd588d34d55_cryptolocker

    • Size

      65KB

    • MD5

      6629fc4184cca22870958bd588d34d55

    • SHA1

      79a6307ab2b3884772621818eeaf7bf6e388154e

    • SHA256

      5a219f0780c6f3f2c3a7eb8fb8220818ed0fe06344cf02ba105edf326d395e64

    • SHA512

      0730bdd053797d98455f38475087238e9cba584f44cfa39bb0885542acc765f71d4026ae5ec035c4d3b8e7ddaec747b70ffee3a84cc7ea55d7ced3f35c07b3dd

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsY/:i5nkFGMOtEvwDpjNbwQEI8UZ/

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks