Overview

overview

10

Static

static

10

2024-02-27...er.exe

windows7-x64

9

2024-02-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-27_f811fa1e7981752783c37339c58dbf1c_cryptolocker

  • Size

    100KB

  • Sample

    240227-tk9yfade39

  • MD5

    f811fa1e7981752783c37339c58dbf1c

  • SHA1

    76dda20822336341e5e7e6795f0fdf517cf60e2a

  • SHA256

    136c506e156ba8ba5e6d309522a8119c8d23f5d0b376f8d1388d58a743615006

  • SHA512

    239027a866f33022e27c2f8f4940da8cd38618a232cdf9304fcb42ac82285972ca0dcf4e225d025a8bee7acd63de18ffba890bb63ace9e80d92769b91092b88f

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNbkVp:i5nkFGMOtEvwDpjNbwQEIikgNK

Score
10/10

Malware Config

Targets

    • Target

      2024-02-27_f811fa1e7981752783c37339c58dbf1c_cryptolocker

    • Size

      100KB

    • MD5

      f811fa1e7981752783c37339c58dbf1c

    • SHA1

      76dda20822336341e5e7e6795f0fdf517cf60e2a

    • SHA256

      136c506e156ba8ba5e6d309522a8119c8d23f5d0b376f8d1388d58a743615006

    • SHA512

      239027a866f33022e27c2f8f4940da8cd38618a232cdf9304fcb42ac82285972ca0dcf4e225d025a8bee7acd63de18ffba890bb63ace9e80d92769b91092b88f

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNbkVp:i5nkFGMOtEvwDpjNbwQEIikgNK

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks