Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-28_fbd0d68705ceb2511713125624a4d8e5_cryptolocker

  • Size

    58KB

  • Sample

    240228-vlcj1ahc8t

  • MD5

    fbd0d68705ceb2511713125624a4d8e5

  • SHA1

    3626f7f9cd9a0f83a17410eae79ee691549acf24

  • SHA256

    37175461f0fa34de0a3c5d511751344c49e1681878a6c8cdc0e68052d094ed47

  • SHA512

    cf78c8a5600d760dfa2b6ce4fcd10e77b5288617d88506d927a94a95e1b5c422cd79a4a8faeb63781809d40f6df338de94fa7713ad094f539d659f85de9140cb

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20PbV4:xj+VGMOtEvwDpjubEgV20Du

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_fbd0d68705ceb2511713125624a4d8e5_cryptolocker

    • Size

      58KB

    • MD5

      fbd0d68705ceb2511713125624a4d8e5

    • SHA1

      3626f7f9cd9a0f83a17410eae79ee691549acf24

    • SHA256

      37175461f0fa34de0a3c5d511751344c49e1681878a6c8cdc0e68052d094ed47

    • SHA512

      cf78c8a5600d760dfa2b6ce4fcd10e77b5288617d88506d927a94a95e1b5c422cd79a4a8faeb63781809d40f6df338de94fa7713ad094f539d659f85de9140cb

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20PbV4:xj+VGMOtEvwDpjubEgV20Du

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks