Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-22_0b2b16fd331241878abbe14f71854f52_cryptolocker

  • Size

    57KB

  • Sample

    240222-felf1abg3w

  • MD5

    0b2b16fd331241878abbe14f71854f52

  • SHA1

    21e27ef92819b9ac5f91f960446ebda64d5a9532

  • SHA256

    fc35649e7aeda488ab65ffaa647f72a852f342b6f12f0c927edd6aead46d5793

  • SHA512

    b2dabd7a5ec57fb8d60a04174dd120e7ee99caaaa3eb7f532f623e737e89888f4b52a26be7a1dd3e0e1767ca76c144a6020e0b4ea9815a8577063d6d3c8e68c0

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbP/0Geh+:xj+VGMOtEvwDpjubXdeE

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_0b2b16fd331241878abbe14f71854f52_cryptolocker

    • Size

      57KB

    • MD5

      0b2b16fd331241878abbe14f71854f52

    • SHA1

      21e27ef92819b9ac5f91f960446ebda64d5a9532

    • SHA256

      fc35649e7aeda488ab65ffaa647f72a852f342b6f12f0c927edd6aead46d5793

    • SHA512

      b2dabd7a5ec57fb8d60a04174dd120e7ee99caaaa3eb7f532f623e737e89888f4b52a26be7a1dd3e0e1767ca76c144a6020e0b4ea9815a8577063d6d3c8e68c0

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbP/0Geh+:xj+VGMOtEvwDpjubXdeE

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks