Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-05_9e72e536c82e28677fe885ffd7aedef0_cryptolocker

  • Size

    101KB

  • Sample

    240305-2mejbabe5v

  • MD5

    9e72e536c82e28677fe885ffd7aedef0

  • SHA1

    2bde8456afb978bea2593bba83919f75a88037f5

  • SHA256

    0bfb119b3c62958c32c3a276e7f6f235dfa22a68d0f0384822d510e760ea0099

  • SHA512

    c8af3342be184f227d0eac75d6f7e9fb830d1ea119b708e9739158c8dfe9dd2d4784ac5471d32bb8e62fb783a539096d4648bae1ab3280fb533c8eaa6173fc49

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28R:xj+VGMOtEvwDpjubwQEIiVmkxv/wR

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_9e72e536c82e28677fe885ffd7aedef0_cryptolocker

    • Size

      101KB

    • MD5

      9e72e536c82e28677fe885ffd7aedef0

    • SHA1

      2bde8456afb978bea2593bba83919f75a88037f5

    • SHA256

      0bfb119b3c62958c32c3a276e7f6f235dfa22a68d0f0384822d510e760ea0099

    • SHA512

      c8af3342be184f227d0eac75d6f7e9fb830d1ea119b708e9739158c8dfe9dd2d4784ac5471d32bb8e62fb783a539096d4648bae1ab3280fb533c8eaa6173fc49

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28R:xj+VGMOtEvwDpjubwQEIiVmkxv/wR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks