Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-19_102f9cd5645140994c06354e91acef1c_cryptolocker

  • Size

    47KB

  • Sample

    240219-ap1qsagc74

  • MD5

    102f9cd5645140994c06354e91acef1c

  • SHA1

    743efd5d70dca4cb041557944f7a6e52e59e72b9

  • SHA256

    6acd849f73a7fe9c4ef561f1e6a4d9f47f44c4e57237ed5b5c1554c7b1bd4949

  • SHA512

    4c399b68f16e358f9d9206c48787d70545988c8044955fae779cc37a0326d13010ab14a43093fa09f670647998ae34fe011269802c4b14ca35d49348514cd8aa

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRV:6j+1NMOtEvwDpjr8hhX3

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_102f9cd5645140994c06354e91acef1c_cryptolocker

    • Size

      47KB

    • MD5

      102f9cd5645140994c06354e91acef1c

    • SHA1

      743efd5d70dca4cb041557944f7a6e52e59e72b9

    • SHA256

      6acd849f73a7fe9c4ef561f1e6a4d9f47f44c4e57237ed5b5c1554c7b1bd4949

    • SHA512

      4c399b68f16e358f9d9206c48787d70545988c8044955fae779cc37a0326d13010ab14a43093fa09f670647998ae34fe011269802c4b14ca35d49348514cd8aa

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRV:6j+1NMOtEvwDpjr8hhX3

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks