Overview

overview

10

Static

static

10

2024-02-25...er.exe

windows7-x64

9

2024-02-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-25_949f1a38aed5b7542c71c46d603f2d17_cryptolocker

  • Size

    102KB

  • Sample

    240225-hccgesef6t

  • MD5

    949f1a38aed5b7542c71c46d603f2d17

  • SHA1

    29b04408be1a3e10ae128a0fd951ab2f0c22769e

  • SHA256

    406d0c59b375f6e61721f08da88e8c6aa03abd24e4ec6b70a0bd9fa426ff8921

  • SHA512

    eb140ec55074afccce37911b93dc44a7f17a4f5175b97917a8cb674c9ab9e5942b0f4776bd5eb346a1caf22fb6aaeab085316b126a3278f0828de702be06bd5a

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMbm:xj+VGMOtEvwDpjubwQEIiVmkxv/mm

Score
10/10

Malware Config

Targets

    • Target

      2024-02-25_949f1a38aed5b7542c71c46d603f2d17_cryptolocker

    • Size

      102KB

    • MD5

      949f1a38aed5b7542c71c46d603f2d17

    • SHA1

      29b04408be1a3e10ae128a0fd951ab2f0c22769e

    • SHA256

      406d0c59b375f6e61721f08da88e8c6aa03abd24e4ec6b70a0bd9fa426ff8921

    • SHA512

      eb140ec55074afccce37911b93dc44a7f17a4f5175b97917a8cb674c9ab9e5942b0f4776bd5eb346a1caf22fb6aaeab085316b126a3278f0828de702be06bd5a

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMbm:xj+VGMOtEvwDpjubwQEIiVmkxv/mm

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks