Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_d00033ebfdfbfd25f1339702c51557c8_cryptolocker

  • Size

    62KB

  • Sample

    240212-we3naacd45

  • MD5

    d00033ebfdfbfd25f1339702c51557c8

  • SHA1

    4ca75be059ca4996ecd757a7ab4a88755cdbb43d

  • SHA256

    83b07b139b9e4dbfc6befb163e4f33f850c2e3f50ab34d199ebcd830fbdc99d2

  • SHA512

    c408aef5a00aa5cbc1bade0f2d3ba13fc51212c42ca8600468491bbbe0cd29d3214de9438232c16009640e079c09afbacd562648f08d541449b3468cc9f3f3a5

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEiNgh:6j+1NMOtEvwDpjr8ox8UDEiU

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_d00033ebfdfbfd25f1339702c51557c8_cryptolocker

    • Size

      62KB

    • MD5

      d00033ebfdfbfd25f1339702c51557c8

    • SHA1

      4ca75be059ca4996ecd757a7ab4a88755cdbb43d

    • SHA256

      83b07b139b9e4dbfc6befb163e4f33f850c2e3f50ab34d199ebcd830fbdc99d2

    • SHA512

      c408aef5a00aa5cbc1bade0f2d3ba13fc51212c42ca8600468491bbbe0cd29d3214de9438232c16009640e079c09afbacd562648f08d541449b3468cc9f3f3a5

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEiNgh:6j+1NMOtEvwDpjr8ox8UDEiU

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks