Overview

overview

10

Static

static

10

2024-03-06...er.exe

windows7-x64

9

2024-03-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_c45c16870bfbd2511e7867fd2d11cb94_cryptolocker

  • Size

    54KB

  • Sample

    240306-hbgpraed83

  • MD5

    c45c16870bfbd2511e7867fd2d11cb94

  • SHA1

    17f4d2380bcae2efbcf7507f706c6b38a4b80465

  • SHA256

    10073e9b817837f85ab2588a9e7a32e8fc9de3c1a3eb1dbc4992902ee85602b0

  • SHA512

    b1073b80c9b8766c89173c857300528af5eb88bc313997671b12dc501a3b2965d188bc06fb12d1f51b32a0fe69a395e61b4d919eed3f5b4f2781310c282642ad

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/e9:6j+1NMOtEvwDpjr8oxExe9

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_c45c16870bfbd2511e7867fd2d11cb94_cryptolocker

    • Size

      54KB

    • MD5

      c45c16870bfbd2511e7867fd2d11cb94

    • SHA1

      17f4d2380bcae2efbcf7507f706c6b38a4b80465

    • SHA256

      10073e9b817837f85ab2588a9e7a32e8fc9de3c1a3eb1dbc4992902ee85602b0

    • SHA512

      b1073b80c9b8766c89173c857300528af5eb88bc313997671b12dc501a3b2965d188bc06fb12d1f51b32a0fe69a395e61b4d919eed3f5b4f2781310c282642ad

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/e9:6j+1NMOtEvwDpjr8oxExe9

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks