Overview

overview

10

Static

static

10

2024-02-18...er.exe

windows7-x64

9

2024-02-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-18_1a0e2f07bb869fe1e36e8336f1c23a30_cryptolocker

  • Size

    47KB

  • Sample

    240218-nldnqshc9s

  • MD5

    1a0e2f07bb869fe1e36e8336f1c23a30

  • SHA1

    2b28282475246cc98952ac286f08261dd1116715

  • SHA256

    3484879ea9ec5a3715a3f65169e8013cf4f3bb2a7d95dd3fb7de849ec7c16946

  • SHA512

    a11dd28f18a09cbda2843c7090e474088b32e07ad24a311f832ef0efc3c075d3a0bb154232df579d26b8e8913cdc217d3b81aaa588cd41e4170ffa845e00d489

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRD:6j+1NMOtEvwDpjr8hhXB

Score
10/10

Malware Config

Targets

    • Target

      2024-02-18_1a0e2f07bb869fe1e36e8336f1c23a30_cryptolocker

    • Size

      47KB

    • MD5

      1a0e2f07bb869fe1e36e8336f1c23a30

    • SHA1

      2b28282475246cc98952ac286f08261dd1116715

    • SHA256

      3484879ea9ec5a3715a3f65169e8013cf4f3bb2a7d95dd3fb7de849ec7c16946

    • SHA512

      a11dd28f18a09cbda2843c7090e474088b32e07ad24a311f832ef0efc3c075d3a0bb154232df579d26b8e8913cdc217d3b81aaa588cd41e4170ffa845e00d489

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRD:6j+1NMOtEvwDpjr8hhXB

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks