Overview

overview

10

Static

static

10

2024-02-25...er.exe

windows7-x64

9

2024-02-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-25_e4b62ce7396af3ac2c7a4a6094957ef3_cryptolocker

  • Size

    38KB

  • Sample

    240225-bcbfsshd79

  • MD5

    e4b62ce7396af3ac2c7a4a6094957ef3

  • SHA1

    6a874021e7abf35662ba28e85591bfa30b2edc36

  • SHA256

    f84815a1f3c29e5906d89432ca685303c10525fbde490547b7bdf7c296df3b38

  • SHA512

    033f8a5f02849b86841eede2c07dd8af4f46a346fde0f176354754d1e3895055ec029a3ccbcdecd47d53287e8c44c54eb92302bf4b304ca4bc102fe3ed9130e8

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLtldJQLr:i5nkFGMOtEvwDpjn/JQn

Score
10/10

Malware Config

Targets

    • Target

      2024-02-25_e4b62ce7396af3ac2c7a4a6094957ef3_cryptolocker

    • Size

      38KB

    • MD5

      e4b62ce7396af3ac2c7a4a6094957ef3

    • SHA1

      6a874021e7abf35662ba28e85591bfa30b2edc36

    • SHA256

      f84815a1f3c29e5906d89432ca685303c10525fbde490547b7bdf7c296df3b38

    • SHA512

      033f8a5f02849b86841eede2c07dd8af4f46a346fde0f176354754d1e3895055ec029a3ccbcdecd47d53287e8c44c54eb92302bf4b304ca4bc102fe3ed9130e8

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLtldJQLr:i5nkFGMOtEvwDpjn/JQn

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks