Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-14_23c240394996e6d7667aeac1aa3527c2_cryptolocker

  • Size

    48KB

  • Sample

    240214-qqy7cach48

  • MD5

    23c240394996e6d7667aeac1aa3527c2

  • SHA1

    cdd3a8e5614ffd3ccd9dee06d98a91b4e99c5e14

  • SHA256

    6f59939151c3046c02402f467d86af8e5bc77511fefdbaa12740a0c52f43015c

  • SHA512

    e230fc644ba4ba308201ca3fe59300fccd8481aa89f8b517314f3d7eed72f0b90b6a8bbce46809051a9c36fb1e44ad98974b80d44edbe0f097b84d29303ff731

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rzhwas:xj+VGMOtEvwDpjy+Ts

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_23c240394996e6d7667aeac1aa3527c2_cryptolocker

    • Size

      48KB

    • MD5

      23c240394996e6d7667aeac1aa3527c2

    • SHA1

      cdd3a8e5614ffd3ccd9dee06d98a91b4e99c5e14

    • SHA256

      6f59939151c3046c02402f467d86af8e5bc77511fefdbaa12740a0c52f43015c

    • SHA512

      e230fc644ba4ba308201ca3fe59300fccd8481aa89f8b517314f3d7eed72f0b90b6a8bbce46809051a9c36fb1e44ad98974b80d44edbe0f097b84d29303ff731

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rzhwas:xj+VGMOtEvwDpjy+Ts

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks