Overview

overview

10

Static

static

10

2024-02-21...er.exe

windows7-x64

9

2024-02-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-21_bdefe0d968b65354797f5b407a851b04_cryptolocker

  • Size

    4.5MB

  • Sample

    240221-xg768ade7x

  • MD5

    bdefe0d968b65354797f5b407a851b04

  • SHA1

    3a1aff299fde7176a24e3789442a1b12eb5934fb

  • SHA256

    b09f420dfb8c6bdef8abf25740a0684079cc1c59a143eaa2f480404778a919b7

  • SHA512

    66b95f24d56bf44ce0cb01c8dcb1669b5157781ffaa4320945faa8689571380c16c01971e250a3f667a34596ddb58dbbe5230aa1f017b36e86498105f650f322

  • SSDEEP

    98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTj:g/ZFIjBzF/ZFIjBzPEUusj

Score
10/10

Malware Config

Targets

    • Target

      2024-02-21_bdefe0d968b65354797f5b407a851b04_cryptolocker

    • Size

      4.5MB

    • MD5

      bdefe0d968b65354797f5b407a851b04

    • SHA1

      3a1aff299fde7176a24e3789442a1b12eb5934fb

    • SHA256

      b09f420dfb8c6bdef8abf25740a0684079cc1c59a143eaa2f480404778a919b7

    • SHA512

      66b95f24d56bf44ce0cb01c8dcb1669b5157781ffaa4320945faa8689571380c16c01971e250a3f667a34596ddb58dbbe5230aa1f017b36e86498105f650f322

    • SSDEEP

      98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTj:g/ZFIjBzF/ZFIjBzPEUusj

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks