Overview

overview

10

Static

static

10

2024-02-20...er.exe

windows7-x64

9

2024-02-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-20_4a22f436b886b68a177230cd3c9c88df_cryptolocker

  • Size

    86KB

  • Sample

    240220-t7kxtscb66

  • MD5

    4a22f436b886b68a177230cd3c9c88df

  • SHA1

    79c937500f708f73877b86ad2d582aa33abbbecf

  • SHA256

    1f0bb7baa46d372378cdc2ce5bf68eb92c8e3846aed02bea04edffe9f85ac8cf

  • SHA512

    08734911dc54c265c7915c426a4aefed58ec57a008eca1e82f8ababda1a4cf04d49b0cb5700198b9e6abda293e4096c894c6335596378cd6017610695bd5b7c5

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcl:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acl

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_4a22f436b886b68a177230cd3c9c88df_cryptolocker

    • Size

      86KB

    • MD5

      4a22f436b886b68a177230cd3c9c88df

    • SHA1

      79c937500f708f73877b86ad2d582aa33abbbecf

    • SHA256

      1f0bb7baa46d372378cdc2ce5bf68eb92c8e3846aed02bea04edffe9f85ac8cf

    • SHA512

      08734911dc54c265c7915c426a4aefed58ec57a008eca1e82f8ababda1a4cf04d49b0cb5700198b9e6abda293e4096c894c6335596378cd6017610695bd5b7c5

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcl:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acl

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks