Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_1d84406eec14fc523e9abe1a3ac7571d_cryptolocker

  • Size

    101KB

  • Sample

    240219-mfh6lacc2y

  • MD5

    1d84406eec14fc523e9abe1a3ac7571d

  • SHA1

    7fabc2eb93f451c47d99608e1c9e00bf79f85b45

  • SHA256

    f4251869012ff89b85b1d01c09b7fe28230fbb9ee380edde1a7a0a8dd90f777c

  • SHA512

    0185fe23335d4f91e041c341bfff881bb002c40c534ee22fc62bd71e524c08f3b2be64417966f318e2826e44844fbe65d1dcc8cb756ce8ad3c97c2cb335911d1

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMtd5T:xj+VGMOtEvwDpjubwQEIiVmkxv/grv7

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_1d84406eec14fc523e9abe1a3ac7571d_cryptolocker

    • Size

      101KB

    • MD5

      1d84406eec14fc523e9abe1a3ac7571d

    • SHA1

      7fabc2eb93f451c47d99608e1c9e00bf79f85b45

    • SHA256

      f4251869012ff89b85b1d01c09b7fe28230fbb9ee380edde1a7a0a8dd90f777c

    • SHA512

      0185fe23335d4f91e041c341bfff881bb002c40c534ee22fc62bd71e524c08f3b2be64417966f318e2826e44844fbe65d1dcc8cb756ce8ad3c97c2cb335911d1

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMtd5T:xj+VGMOtEvwDpjubwQEIiVmkxv/grv7

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks