Overview

overview

10

Static

static

10

2024-02-13...er.exe

windows7-x64

9

2024-02-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-13_3229fb5067c0b6ac80e8782b08ffe118_cryptolocker

  • Size

    54KB

  • Sample

    240213-v4z31sea2w

  • MD5

    3229fb5067c0b6ac80e8782b08ffe118

  • SHA1

    761a7f1ff42940329c032918d7e8cdb08d96fd51

  • SHA256

    2d15515f160301a43dc258fea551e5c558d79f7e2ec5a69e51cfe24ec8d03731

  • SHA512

    71d099c3fa22c888062e11c02a861091ae878cd8d6e56380127752efd95b84259b0ae10fd1c3ac69f1ef1253727f1895cbeab92099b22ac97de7ec3a1e13d01c

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7Wwfl:6j+1NMOtEvwDpjr8oxE5

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_3229fb5067c0b6ac80e8782b08ffe118_cryptolocker

    • Size

      54KB

    • MD5

      3229fb5067c0b6ac80e8782b08ffe118

    • SHA1

      761a7f1ff42940329c032918d7e8cdb08d96fd51

    • SHA256

      2d15515f160301a43dc258fea551e5c558d79f7e2ec5a69e51cfe24ec8d03731

    • SHA512

      71d099c3fa22c888062e11c02a861091ae878cd8d6e56380127752efd95b84259b0ae10fd1c3ac69f1ef1253727f1895cbeab92099b22ac97de7ec3a1e13d01c

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7Wwfl:6j+1NMOtEvwDpjr8oxE5

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks