Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-17_8115cfdf316de624ea95509d8d21cac5_cryptolocker

  • Size

    63KB

  • Sample

    240217-w8ylesab99

  • MD5

    8115cfdf316de624ea95509d8d21cac5

  • SHA1

    670188def74c27f5ce1eb64aa01a8bc26e2a247e

  • SHA256

    623fa68a206ddb2eafebd96839b2cdc5108a590e9ce115441eede6784044b1d6

  • SHA512

    75ce42fb5be0278e0878554b4443e4c76fb125604066e55efa3a7b5c70ddc7c48469aa5e4fe47cbc412b94be89b1c949f00743d9a1d9ca491a1b806da9a54ab8

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10Km8:6j+1NMOtEvwDpjr8ox8UDEy0Km8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_8115cfdf316de624ea95509d8d21cac5_cryptolocker

    • Size

      63KB

    • MD5

      8115cfdf316de624ea95509d8d21cac5

    • SHA1

      670188def74c27f5ce1eb64aa01a8bc26e2a247e

    • SHA256

      623fa68a206ddb2eafebd96839b2cdc5108a590e9ce115441eede6784044b1d6

    • SHA512

      75ce42fb5be0278e0878554b4443e4c76fb125604066e55efa3a7b5c70ddc7c48469aa5e4fe47cbc412b94be89b1c949f00743d9a1d9ca491a1b806da9a54ab8

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10Km8:6j+1NMOtEvwDpjr8ox8UDEy0Km8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks