Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_539fbedd5e8f054aa08074f89997c4ed_cryptolocker

  • Size

    38KB

  • Sample

    240214-hgszzabg4z

  • MD5

    539fbedd5e8f054aa08074f89997c4ed

  • SHA1

    2c2df917f132881ae053231990182b5b01497f65

  • SHA256

    798a421cb3fb9432d3b41a75e534c0294810c4ffebe8c5dae1d30e41284b3ae2

  • SHA512

    d3d96eb3c8c739f25e3e597cf05ae6a071b694997cb586d7aa8c326d8e2d23dd4059bc7b3f978432ee26d95d3f92b9b67ff0fa4aa0440bb224fa8ecb479abf4f

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRy:m5nkFNMOtEvwDpjG8hhXk

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_539fbedd5e8f054aa08074f89997c4ed_cryptolocker

    • Size

      38KB

    • MD5

      539fbedd5e8f054aa08074f89997c4ed

    • SHA1

      2c2df917f132881ae053231990182b5b01497f65

    • SHA256

      798a421cb3fb9432d3b41a75e534c0294810c4ffebe8c5dae1d30e41284b3ae2

    • SHA512

      d3d96eb3c8c739f25e3e597cf05ae6a071b694997cb586d7aa8c326d8e2d23dd4059bc7b3f978432ee26d95d3f92b9b67ff0fa4aa0440bb224fa8ecb479abf4f

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRy:m5nkFNMOtEvwDpjG8hhXk

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks