Overview

overview

10

Static

static

10

2024-03-19...er.exe

windows7-x64

9

2024-03-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-19_659f33b8cda7a4966cda7a335f030220_cryptolocker

  • Size

    46KB

  • Sample

    240319-e857tsae3v

  • MD5

    659f33b8cda7a4966cda7a335f030220

  • SHA1

    9ae4b81e2b3960031c62f69f4cc516e0be38c730

  • SHA256

    5890e76724e375f78715b3bfc531e15132da1db0102e3ea414851481052632c6

  • SHA512

    b9a4f4dd95a89e95d03bee07e46682a4d3e4bcc739f1a4f1e733ea975004c4d1edfc8e83e7ef9e58167ca7efe58d9a584b75862f94625e214937034e5b2c8192

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdsQTN:XS5nQJ24LR1bytOOtEvwDpjNbP/bsSN

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_659f33b8cda7a4966cda7a335f030220_cryptolocker

    • Size

      46KB

    • MD5

      659f33b8cda7a4966cda7a335f030220

    • SHA1

      9ae4b81e2b3960031c62f69f4cc516e0be38c730

    • SHA256

      5890e76724e375f78715b3bfc531e15132da1db0102e3ea414851481052632c6

    • SHA512

      b9a4f4dd95a89e95d03bee07e46682a4d3e4bcc739f1a4f1e733ea975004c4d1edfc8e83e7ef9e58167ca7efe58d9a584b75862f94625e214937034e5b2c8192

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdsQTN:XS5nQJ24LR1bytOOtEvwDpjNbP/bsSN

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks