Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_f2859eed779c80fd0ac2eea8b6b5e47d_cryptolocker

  • Size

    38KB

  • Sample

    240214-rdkc4acf5v

  • MD5

    f2859eed779c80fd0ac2eea8b6b5e47d

  • SHA1

    3cd6c48557daf3ea2c5ed3d5e7082817fcc21a2e

  • SHA256

    63c4d93bc18c8a5a9f2f02a4bd5787e20f78369df80e8a04d142b053b3666cc2

  • SHA512

    2d8a37bff0f2e7ca506f59e61eb6685b0c73a3f3d440c51c2cfa64e15ea7e5db87aeda82ca9a7176566ffa2e5b17f11dbb38a4433152616978c5797462c7e6d4

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yY8:i5nkFGMOtEvwDpjR+viH8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_f2859eed779c80fd0ac2eea8b6b5e47d_cryptolocker

    • Size

      38KB

    • MD5

      f2859eed779c80fd0ac2eea8b6b5e47d

    • SHA1

      3cd6c48557daf3ea2c5ed3d5e7082817fcc21a2e

    • SHA256

      63c4d93bc18c8a5a9f2f02a4bd5787e20f78369df80e8a04d142b053b3666cc2

    • SHA512

      2d8a37bff0f2e7ca506f59e61eb6685b0c73a3f3d440c51c2cfa64e15ea7e5db87aeda82ca9a7176566ffa2e5b17f11dbb38a4433152616978c5797462c7e6d4

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yY8:i5nkFGMOtEvwDpjR+viH8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks