Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_046fc9c087810f399eee055c161e0a60_cryptolocker

  • Size

    77KB

  • Sample

    240212-w1ehksce64

  • MD5

    046fc9c087810f399eee055c161e0a60

  • SHA1

    bdc80a9adfc590aaf55f07a7039699db7e3120fb

  • SHA256

    150cf9ccdec1d952be9d8621c6293c30535b279a316d824702c67e0506a0797c

  • SHA512

    ef1261e871097c8d3f29b88c48b071016ce45d3bc87b65bfe310726eecc33da75751ed9a40d872446e403b0013ff94e149158ca0500e6f12b16f3be05ce5134a

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUflteGAU4:xj+VGMOtEvwDpjubwQEI8Uvk

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_046fc9c087810f399eee055c161e0a60_cryptolocker

    • Size

      77KB

    • MD5

      046fc9c087810f399eee055c161e0a60

    • SHA1

      bdc80a9adfc590aaf55f07a7039699db7e3120fb

    • SHA256

      150cf9ccdec1d952be9d8621c6293c30535b279a316d824702c67e0506a0797c

    • SHA512

      ef1261e871097c8d3f29b88c48b071016ce45d3bc87b65bfe310726eecc33da75751ed9a40d872446e403b0013ff94e149158ca0500e6f12b16f3be05ce5134a

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUflteGAU4:xj+VGMOtEvwDpjubwQEI8Uvk

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks