Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-19_23ff47b71922543d356dbb35045022f0_cryptolocker

  • Size

    65KB

  • Sample

    240319-avsbladd2v

  • MD5

    23ff47b71922543d356dbb35045022f0

  • SHA1

    d715d6c0039416312e3d15bf4e3a8717029fbad2

  • SHA256

    6f9813abec8acb8b5522d235a8f5e076eeea0eff6389e4b9fbab642f760bc500

  • SHA512

    03e1aceedae1fde0fba337d936606d635c1079714f19baa22b87dddb3314ad44e259a1c288858f35e44a1ab99a7ffe7a7b0d84f4c7385936d4d8bfd9f4c98ffd

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEMoNUxc:6j+1NMOtEvwDpjr8ox8UDEh2c

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_23ff47b71922543d356dbb35045022f0_cryptolocker

    • Size

      65KB

    • MD5

      23ff47b71922543d356dbb35045022f0

    • SHA1

      d715d6c0039416312e3d15bf4e3a8717029fbad2

    • SHA256

      6f9813abec8acb8b5522d235a8f5e076eeea0eff6389e4b9fbab642f760bc500

    • SHA512

      03e1aceedae1fde0fba337d936606d635c1079714f19baa22b87dddb3314ad44e259a1c288858f35e44a1ab99a7ffe7a7b0d84f4c7385936d4d8bfd9f4c98ffd

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEMoNUxc:6j+1NMOtEvwDpjr8ox8UDEh2c

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks