Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-19_21d027b7ad0926fd055340b42a524360_cryptolocker

  • Size

    48KB

  • Sample

    240219-sxe36aef81

  • MD5

    21d027b7ad0926fd055340b42a524360

  • SHA1

    78a055f2cb4237104579f9b803bc0d150f44a4ec

  • SHA256

    9d0b5e8b0b12a1e0f962fb249d2993ce916a4acede56c3750edbb01011647322

  • SHA512

    99dea82f7f584bc808b9cf83d727baac91b10ea22678544999fb4828b0eb1bf65a5b70026462699347fa6442c60d4dcf8b3ded3137b19ee13c48d71c2e29406a

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpzY:XS5nQJ24LR1bytOOtEvwDpjNbP/0GehW

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_21d027b7ad0926fd055340b42a524360_cryptolocker

    • Size

      48KB

    • MD5

      21d027b7ad0926fd055340b42a524360

    • SHA1

      78a055f2cb4237104579f9b803bc0d150f44a4ec

    • SHA256

      9d0b5e8b0b12a1e0f962fb249d2993ce916a4acede56c3750edbb01011647322

    • SHA512

      99dea82f7f584bc808b9cf83d727baac91b10ea22678544999fb4828b0eb1bf65a5b70026462699347fa6442c60d4dcf8b3ded3137b19ee13c48d71c2e29406a

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpzY:XS5nQJ24LR1bytOOtEvwDpjNbP/0GehW

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks