Overview

overview

10

Static

static

10

2024-02-20...er.exe

windows7-x64

9

2024-02-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-20_10d3008f2526db27f783a76cd6394e3b_cryptolocker

  • Size

    47KB

  • Sample

    240220-dx1brsag26

  • MD5

    10d3008f2526db27f783a76cd6394e3b

  • SHA1

    f6b4d54a482b5d0a1473a9ba2c1a0c5e9f2a1dfe

  • SHA256

    c098c29fda23be4adab2286d969b094eeb91d1a30c012f49d514ed6914715827

  • SHA512

    81b07bf6ac7001ecd91f4e65eac9260404665ef5b1e0cb3f19c7fcfa8a98d2481d83e4ab1dcee6f472589648df8b6855efe0445e1afa239222ce6abac75ba8f0

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRE:6j+1NMOtEvwDpjr8hhXS

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_10d3008f2526db27f783a76cd6394e3b_cryptolocker

    • Size

      47KB

    • MD5

      10d3008f2526db27f783a76cd6394e3b

    • SHA1

      f6b4d54a482b5d0a1473a9ba2c1a0c5e9f2a1dfe

    • SHA256

      c098c29fda23be4adab2286d969b094eeb91d1a30c012f49d514ed6914715827

    • SHA512

      81b07bf6ac7001ecd91f4e65eac9260404665ef5b1e0cb3f19c7fcfa8a98d2481d83e4ab1dcee6f472589648df8b6855efe0445e1afa239222ce6abac75ba8f0

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRE:6j+1NMOtEvwDpjr8hhXS

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks