Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-28_6a05a6a0729c45128e982470252f3fb2_cryptolocker

  • Size

    41KB

  • Sample

    240228-ll2z8agd51

  • MD5

    6a05a6a0729c45128e982470252f3fb2

  • SHA1

    038f82a82b29e5647bccf912d60f2a1a8a565c10

  • SHA256

    144cc0b7c052c07c3ef3360d7c8dda61258f3d7ab2a653906e9fff3614247d99

  • SHA512

    10f02169d38355311b834416b21028923f82611e0cacb41c1e1a87fe61f6a3aa723e8b4fafc3658eac27591a7a18f836ce37d5922727baa1be747c8f6797c6d4

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/Ctsj:6j+1NMOtEvwDpjrR2sj

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_6a05a6a0729c45128e982470252f3fb2_cryptolocker

    • Size

      41KB

    • MD5

      6a05a6a0729c45128e982470252f3fb2

    • SHA1

      038f82a82b29e5647bccf912d60f2a1a8a565c10

    • SHA256

      144cc0b7c052c07c3ef3360d7c8dda61258f3d7ab2a653906e9fff3614247d99

    • SHA512

      10f02169d38355311b834416b21028923f82611e0cacb41c1e1a87fe61f6a3aa723e8b4fafc3658eac27591a7a18f836ce37d5922727baa1be747c8f6797c6d4

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/Ctsj:6j+1NMOtEvwDpjrR2sj

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks