Overview

overview

10

Static

static

10

2024-03-05...er.exe

windows7-x64

9

2024-03-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-05_63a4e5614c41b2e755e8e53175f53c92_cryptolocker

  • Size

    39KB

  • Sample

    240305-rs9ljagh4y

  • MD5

    63a4e5614c41b2e755e8e53175f53c92

  • SHA1

    d88d7eecabc197731ecf6115c5db0f994d5c02ea

  • SHA256

    015c585eb6a3388e84638b111521b912c432e1a5ec6570af50c4ebbbb3c05153

  • SHA512

    9a469e6b4c4eae150ec13bddbe7e608661beffbe0b5b0d0687a49d56bf33b823e3c2797a928efed0721de8ae2a60380bb2cbbb5216747375f16289847127e311

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnS:m5nkFNMOtEvwDpjG8hgpS

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_63a4e5614c41b2e755e8e53175f53c92_cryptolocker

    • Size

      39KB

    • MD5

      63a4e5614c41b2e755e8e53175f53c92

    • SHA1

      d88d7eecabc197731ecf6115c5db0f994d5c02ea

    • SHA256

      015c585eb6a3388e84638b111521b912c432e1a5ec6570af50c4ebbbb3c05153

    • SHA512

      9a469e6b4c4eae150ec13bddbe7e608661beffbe0b5b0d0687a49d56bf33b823e3c2797a928efed0721de8ae2a60380bb2cbbb5216747375f16289847127e311

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnS:m5nkFNMOtEvwDpjG8hgpS

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks