Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-05_13863f8604521f08264419d8bc3873b4_cryptolocker

  • Size

    85KB

  • Sample

    240305-1asdzaag44

  • MD5

    13863f8604521f08264419d8bc3873b4

  • SHA1

    c440de3128a5f6b68ea4a33acd64edabaf1495cf

  • SHA256

    f3d522eb705af4560be6fa6a1f40402ab73bb1ca926f46a787677508e62c99bb

  • SHA512

    f7f3d0b92082bda34c647edf65f235ccd9c37955fa2ad9be453fbd6334439b368bfb8890485383ffa524201640828f71e75725252f0214167ddead1a5c1bd0cc

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP29yV:i5nkFGMOtEvwDpjNbwQEI8UtzNcO89

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_13863f8604521f08264419d8bc3873b4_cryptolocker

    • Size

      85KB

    • MD5

      13863f8604521f08264419d8bc3873b4

    • SHA1

      c440de3128a5f6b68ea4a33acd64edabaf1495cf

    • SHA256

      f3d522eb705af4560be6fa6a1f40402ab73bb1ca926f46a787677508e62c99bb

    • SHA512

      f7f3d0b92082bda34c647edf65f235ccd9c37955fa2ad9be453fbd6334439b368bfb8890485383ffa524201640828f71e75725252f0214167ddead1a5c1bd0cc

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP29yV:i5nkFGMOtEvwDpjNbwQEI8UtzNcO89

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks