Overview

overview

10

Static

static

10

2024-02-23...er.exe

windows7-x64

9

2024-02-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-23_5140a61814d7ddb0f1b9055e660ea6db_cryptolocker

  • Size

    63KB

  • Sample

    240223-psx7dsgc83

  • MD5

    5140a61814d7ddb0f1b9055e660ea6db

  • SHA1

    ec1d7425db12e3d7d6e9a72c13665541d7b0822c

  • SHA256

    84f932307c95033911d31e2fbf258fa522fa1eafc5f32830acdcef11ac111405

  • SHA512

    f74b7214cec6e902e803300f839acb626c2b0df32fe42cd96beb0688eb22eca26cf58d1ccd7dec78e7e42d99486e4e4e4828d3bb5773b21433444339af1899ec

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEMI:6j+1NMOtEvwDpjr8ox8UDEB

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_5140a61814d7ddb0f1b9055e660ea6db_cryptolocker

    • Size

      63KB

    • MD5

      5140a61814d7ddb0f1b9055e660ea6db

    • SHA1

      ec1d7425db12e3d7d6e9a72c13665541d7b0822c

    • SHA256

      84f932307c95033911d31e2fbf258fa522fa1eafc5f32830acdcef11ac111405

    • SHA512

      f74b7214cec6e902e803300f839acb626c2b0df32fe42cd96beb0688eb22eca26cf58d1ccd7dec78e7e42d99486e4e4e4828d3bb5773b21433444339af1899ec

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEMI:6j+1NMOtEvwDpjr8ox8UDEB

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks