Overview

overview

10

Static

static

10

2024-02-24...er.exe

windows7-x64

9

2024-02-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-24_aae2f4ce49b5ed63138ec22c22243526_cryptolocker

  • Size

    63KB

  • Sample

    240224-r3fq7sef94

  • MD5

    aae2f4ce49b5ed63138ec22c22243526

  • SHA1

    65226f0904bb0af78078c2d113320b18ede3c2c4

  • SHA256

    2260ae4988daad90fab7f3e0adf6fb62180824890d9f15cac38ec38e1024fe0f

  • SHA512

    a887d17f0d3ca559ab95c0f16f6ab62594c9f7d7ab1f7b11ee43bf14da96050cd89ab5d3b8a3c34c145f3c829171877165af06e3128fbaf73d114225d1aaa64d

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKIy:6j+1NMOtEvwDpjr8ox8UDEKB

Score
10/10

Malware Config

Targets

    • Target

      2024-02-24_aae2f4ce49b5ed63138ec22c22243526_cryptolocker

    • Size

      63KB

    • MD5

      aae2f4ce49b5ed63138ec22c22243526

    • SHA1

      65226f0904bb0af78078c2d113320b18ede3c2c4

    • SHA256

      2260ae4988daad90fab7f3e0adf6fb62180824890d9f15cac38ec38e1024fe0f

    • SHA512

      a887d17f0d3ca559ab95c0f16f6ab62594c9f7d7ab1f7b11ee43bf14da96050cd89ab5d3b8a3c34c145f3c829171877165af06e3128fbaf73d114225d1aaa64d

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKIy:6j+1NMOtEvwDpjr8ox8UDEKB

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks