Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-28_6cfaf40a23ca9e43230efce139a13772_cryptolocker

  • Size

    49KB

  • Sample

    240228-vx6xzshf9x

  • MD5

    6cfaf40a23ca9e43230efce139a13772

  • SHA1

    b69fbba2c49b876a81741e43126a723db37b73e7

  • SHA256

    1159c8afdc59951ac15c79c4784d270cab54af563aebb9eeaf5e12915c76d0db

  • SHA512

    c3ab1d74830e8a9cf1df9473ad2e07a5adff3c6810cc21dd21b7458ba373af2481a282fa8937e79a824505d2f0bb94b1a1d25cb02cbcbf858807e68c9f838fb9

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbP/0GeUMxI:i5nkFGMOtEvwDpjNbXdeUd

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_6cfaf40a23ca9e43230efce139a13772_cryptolocker

    • Size

      49KB

    • MD5

      6cfaf40a23ca9e43230efce139a13772

    • SHA1

      b69fbba2c49b876a81741e43126a723db37b73e7

    • SHA256

      1159c8afdc59951ac15c79c4784d270cab54af563aebb9eeaf5e12915c76d0db

    • SHA512

      c3ab1d74830e8a9cf1df9473ad2e07a5adff3c6810cc21dd21b7458ba373af2481a282fa8937e79a824505d2f0bb94b1a1d25cb02cbcbf858807e68c9f838fb9

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbP/0GeUMxI:i5nkFGMOtEvwDpjNbXdeUd

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks