Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-28_966905532ec0df50cbe5baa0a6d87200_cryptolocker

  • Size

    40KB

  • Sample

    240228-jsn1tseg94

  • MD5

    966905532ec0df50cbe5baa0a6d87200

  • SHA1

    c8d42e5277bd12313aca7a28e3982c2151e27a97

  • SHA256

    9b53b7f8487f93ec282b034cc099ccc9552f8c68a9c101b10b7047c790659eaa

  • SHA512

    705427f17f5fd059969ef1b7184a1aa5c784d6fb810d3b045449823998b46988ef0b09e3f21c89257e1c2bc1e123a13f8f880089e26344c135e22b197b0c9d49

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRY/8:m5nkFNMOtEvwDpjG8hhXy/8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_966905532ec0df50cbe5baa0a6d87200_cryptolocker

    • Size

      40KB

    • MD5

      966905532ec0df50cbe5baa0a6d87200

    • SHA1

      c8d42e5277bd12313aca7a28e3982c2151e27a97

    • SHA256

      9b53b7f8487f93ec282b034cc099ccc9552f8c68a9c101b10b7047c790659eaa

    • SHA512

      705427f17f5fd059969ef1b7184a1aa5c784d6fb810d3b045449823998b46988ef0b09e3f21c89257e1c2bc1e123a13f8f880089e26344c135e22b197b0c9d49

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRY/8:m5nkFNMOtEvwDpjG8hhXy/8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks