Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_69ec62da0503b66e43cd734698c21e8c_cryptolocker

  • Size

    55KB

  • Sample

    240219-v4q54shd8y

  • MD5

    69ec62da0503b66e43cd734698c21e8c

  • SHA1

    2af61efb4cf8c74d7ddde29ea63954dc6fcca92a

  • SHA256

    4a0d3d1c871ef62f3789a6ad48a664bf0e8b7c1f68b034fd4edc34622db4855d

  • SHA512

    61030d31b7cdb33304e86fc0c1961944af5c4e6c607050c819ed6463061a19d404e234af0b5667df6980d8addd839aeaa9cbda03f9f9d761b50fb3346eb4e983

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7Wwfel:6j+1NMOtEvwDpjr8oxEql

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_69ec62da0503b66e43cd734698c21e8c_cryptolocker

    • Size

      55KB

    • MD5

      69ec62da0503b66e43cd734698c21e8c

    • SHA1

      2af61efb4cf8c74d7ddde29ea63954dc6fcca92a

    • SHA256

      4a0d3d1c871ef62f3789a6ad48a664bf0e8b7c1f68b034fd4edc34622db4855d

    • SHA512

      61030d31b7cdb33304e86fc0c1961944af5c4e6c607050c819ed6463061a19d404e234af0b5667df6980d8addd839aeaa9cbda03f9f9d761b50fb3346eb4e983

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7Wwfel:6j+1NMOtEvwDpjr8oxEql

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks