Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_590fe969d886bad01c5f1c2b026260db_cryptolocker

  • Size

    64KB

  • Sample

    240212-yp5xhabd4s

  • MD5

    590fe969d886bad01c5f1c2b026260db

  • SHA1

    e7a1ee3e58d370cf92b7439aa9bd37a55505908d

  • SHA256

    bcc6aee40c0c611945460c6ac0242c7a2ce9b42bc9fae6ed4cd54671618a7607

  • SHA512

    fe938180a2c9a6c2acbeac6e966933958a19c11e9bd970885a29c4a200a6b03e60ded365996b3fb7b15f0149b43939c7d74acc949b6cc1b0583b83b8da4dcf14

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPIb:6j+1NMOtEvwDpjr8ox8UDEpuha8PIb

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_590fe969d886bad01c5f1c2b026260db_cryptolocker

    • Size

      64KB

    • MD5

      590fe969d886bad01c5f1c2b026260db

    • SHA1

      e7a1ee3e58d370cf92b7439aa9bd37a55505908d

    • SHA256

      bcc6aee40c0c611945460c6ac0242c7a2ce9b42bc9fae6ed4cd54671618a7607

    • SHA512

      fe938180a2c9a6c2acbeac6e966933958a19c11e9bd970885a29c4a200a6b03e60ded365996b3fb7b15f0149b43939c7d74acc949b6cc1b0583b83b8da4dcf14

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPIb:6j+1NMOtEvwDpjr8ox8UDEpuha8PIb

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks