Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-06_656ba432faec0ffc7b4f595c4f3b7c70_cryptolocker

  • Size

    87KB

  • Sample

    240306-gqjl8adg67

  • MD5

    656ba432faec0ffc7b4f595c4f3b7c70

  • SHA1

    b04e97397e84aeca5df2c4f2ab331ac78e48a269

  • SHA256

    704cc7ad83cb208e8995dc1d78b62d3f2a379bbb8d9a934448fe45fdffa96758

  • SHA512

    418ff805a515e345238359a6a8b4f2214674ae950b00c3edcd81442e96401d00144b8091f34dde2cdf5315cd84e28c1c76bf547e7f9123f0db2f2bbeaa837ee7

  • SSDEEP

    1536:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acj1:okFDOtEvwDpjPq

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_656ba432faec0ffc7b4f595c4f3b7c70_cryptolocker

    • Size

      87KB

    • MD5

      656ba432faec0ffc7b4f595c4f3b7c70

    • SHA1

      b04e97397e84aeca5df2c4f2ab331ac78e48a269

    • SHA256

      704cc7ad83cb208e8995dc1d78b62d3f2a379bbb8d9a934448fe45fdffa96758

    • SHA512

      418ff805a515e345238359a6a8b4f2214674ae950b00c3edcd81442e96401d00144b8091f34dde2cdf5315cd84e28c1c76bf547e7f9123f0db2f2bbeaa837ee7

    • SSDEEP

      1536:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acj1:okFDOtEvwDpjPq

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks