Overview

overview

10

Static

static

10

2024-03-12...er.exe

windows7-x64

9

2024-03-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-12_1b96d8de4e72810ad4114a6dffde68ef_cryptolocker

  • Size

    47KB

  • Sample

    240312-x7vntahd8t

  • MD5

    1b96d8de4e72810ad4114a6dffde68ef

  • SHA1

    4561f018814fe02b410c873f872303aae8298e73

  • SHA256

    e72c2c060c46b082a59c63ddd937631fdc68f8e9f814ff5b7a9dfce7e277caef

  • SHA512

    928733dee7006ab1ac3917f9789b6a44558570641093aa0906b1f4bc3ae3ca6ec87c39bb301076f662fddad8c280e1755e4e76ec796f9f444c8bc940c30d204d

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN44:xj+VGMOtEvwDpjy+TN44

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_1b96d8de4e72810ad4114a6dffde68ef_cryptolocker

    • Size

      47KB

    • MD5

      1b96d8de4e72810ad4114a6dffde68ef

    • SHA1

      4561f018814fe02b410c873f872303aae8298e73

    • SHA256

      e72c2c060c46b082a59c63ddd937631fdc68f8e9f814ff5b7a9dfce7e277caef

    • SHA512

      928733dee7006ab1ac3917f9789b6a44558570641093aa0906b1f4bc3ae3ca6ec87c39bb301076f662fddad8c280e1755e4e76ec796f9f444c8bc940c30d204d

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN44:xj+VGMOtEvwDpjy+TN44

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks