Overview

overview

10

Static

static

10

2024-02-18...er.exe

windows7-x64

9

2024-02-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-18_3368d2157201cf88cbca003d3c100c0c_cryptolocker

  • Size

    57KB

  • Sample

    240218-2frv3afe46

  • MD5

    3368d2157201cf88cbca003d3c100c0c

  • SHA1

    4b5d4e12face2cbbcc0210364b3fac17b3793cbf

  • SHA256

    34a64f0b8241ec0dc916f10c42f0562ce50879d0d4a3b074f741a64e18845a78

  • SHA512

    fc137bb898fcbc681bd0d6e7e0c292b4a75f2da699fb7cb62da9c32c12234fc3c59f2c3ae242715952376d0a42eebbf349a547db608340f6ca56ac15a97bd371

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20Pb4:xj+VGMOtEvwDpjubEgV20D4

Score
10/10

Malware Config

Targets

    • Target

      2024-02-18_3368d2157201cf88cbca003d3c100c0c_cryptolocker

    • Size

      57KB

    • MD5

      3368d2157201cf88cbca003d3c100c0c

    • SHA1

      4b5d4e12face2cbbcc0210364b3fac17b3793cbf

    • SHA256

      34a64f0b8241ec0dc916f10c42f0562ce50879d0d4a3b074f741a64e18845a78

    • SHA512

      fc137bb898fcbc681bd0d6e7e0c292b4a75f2da699fb7cb62da9c32c12234fc3c59f2c3ae242715952376d0a42eebbf349a547db608340f6ca56ac15a97bd371

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20Pb4:xj+VGMOtEvwDpjubEgV20D4

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks