Overview

overview

10

Static

static

10

2024-02-18...er.exe

windows7-x64

9

2024-02-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-18_c6adbc7019d45685bd5d253bc9cdc084_cryptolocker

  • Size

    40KB

  • Sample

    240218-wn9g7adc9t

  • MD5

    c6adbc7019d45685bd5d253bc9cdc084

  • SHA1

    e806f8bd27013a7fada724779bd2ef36fec7c938

  • SHA256

    59b37f80bc50a487a2226e434849a03b584b9096c24cbac5e862db622a5a88f4

  • SHA512

    cc6b98b327466688383fadc88de833c2caffc88dbc4470a5bb10845e8481e71a63d56730261d5567bd6aee20bd2b69997451146b345bb6f743d8dd955c4b2a4f

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/Ctg:6j+1NMOtEvwDpjrR2g

Score
10/10

Malware Config

Targets

    • Target

      2024-02-18_c6adbc7019d45685bd5d253bc9cdc084_cryptolocker

    • Size

      40KB

    • MD5

      c6adbc7019d45685bd5d253bc9cdc084

    • SHA1

      e806f8bd27013a7fada724779bd2ef36fec7c938

    • SHA256

      59b37f80bc50a487a2226e434849a03b584b9096c24cbac5e862db622a5a88f4

    • SHA512

      cc6b98b327466688383fadc88de833c2caffc88dbc4470a5bb10845e8481e71a63d56730261d5567bd6aee20bd2b69997451146b345bb6f743d8dd955c4b2a4f

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/Ctg:6j+1NMOtEvwDpjrR2g

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks