Overview

overview

10

Static

static

10

2024-02-20...er.exe

windows7-x64

9

2024-02-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-20_417edcdb1a3d4f02a90ebafd3274e504_cryptolocker

  • Size

    93KB

  • Sample

    240220-h9z9radc2w

  • MD5

    417edcdb1a3d4f02a90ebafd3274e504

  • SHA1

    f1e1ed53712d5d0a5eeea0e6e593ea8c9e74e68c

  • SHA256

    32b7581c481f84275041612a556c68a7e5029596b1db0ac465a327489b8701ff

  • SHA512

    146b5f8275ceb909977f3a51feb681500e2636b287c18f4dbe6ddb78f7f7e2525e9d109cab1debe8bb29e24fdbd652bde0e4dc99c31beee13cd47b2ac586cdde

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyzT:xj+VGMOtEvwDpjubwQEIiVmkuzT

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_417edcdb1a3d4f02a90ebafd3274e504_cryptolocker

    • Size

      93KB

    • MD5

      417edcdb1a3d4f02a90ebafd3274e504

    • SHA1

      f1e1ed53712d5d0a5eeea0e6e593ea8c9e74e68c

    • SHA256

      32b7581c481f84275041612a556c68a7e5029596b1db0ac465a327489b8701ff

    • SHA512

      146b5f8275ceb909977f3a51feb681500e2636b287c18f4dbe6ddb78f7f7e2525e9d109cab1debe8bb29e24fdbd652bde0e4dc99c31beee13cd47b2ac586cdde

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyzT:xj+VGMOtEvwDpjubwQEIiVmkuzT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks