Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_8963b73e405df5985a2cc9c7a5ad16df_cryptolocker

  • Size

    51KB

  • Sample

    240219-x8r93scb97

  • MD5

    8963b73e405df5985a2cc9c7a5ad16df

  • SHA1

    bdf40136143543595509c40cf7e0a89d7112b7eb

  • SHA256

    613d9e258f6d72c3aba345ffdee3a5cd4a9fb698674730c4690153bdee5ac3b5

  • SHA512

    3bb3737117a3fb9106318652fc9e27028b84ffe8fbeb3ac8e56d38dbf652d8b958954cc907cce33f27c674076d64a9ca97d0dbe772677818649152dde1f8ee28

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MzF3FL:i5nkFGMOtEvwDpjNbwQEqB

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_8963b73e405df5985a2cc9c7a5ad16df_cryptolocker

    • Size

      51KB

    • MD5

      8963b73e405df5985a2cc9c7a5ad16df

    • SHA1

      bdf40136143543595509c40cf7e0a89d7112b7eb

    • SHA256

      613d9e258f6d72c3aba345ffdee3a5cd4a9fb698674730c4690153bdee5ac3b5

    • SHA512

      3bb3737117a3fb9106318652fc9e27028b84ffe8fbeb3ac8e56d38dbf652d8b958954cc907cce33f27c674076d64a9ca97d0dbe772677818649152dde1f8ee28

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MzF3FL:i5nkFGMOtEvwDpjNbwQEqB

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks