Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-26_e9056510cf4ba8664ce2c0381bea4e8c_cryptolocker

  • Size

    40KB

  • Sample

    240326-hlkt6age7s

  • MD5

    e9056510cf4ba8664ce2c0381bea4e8c

  • SHA1

    0abdbfe22d2a4e4e2b2053df0e65b2ab2deef0ae

  • SHA256

    f351534a45b3321089730a7e3c1ef5d0eb70e2afd19a73752ff38d7999d81cb6

  • SHA512

    0a99d41f671c7d41f08bdcbeab761aefeebacbbc90d18c1eef0955e1c3d6c4757a4df33a6dc0b4863068876b53681b886e75db41d4f57768e9982c702aa1cf6f

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnH8h:m5nkFNMOtEvwDpjG8hgpH8h

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_e9056510cf4ba8664ce2c0381bea4e8c_cryptolocker

    • Size

      40KB

    • MD5

      e9056510cf4ba8664ce2c0381bea4e8c

    • SHA1

      0abdbfe22d2a4e4e2b2053df0e65b2ab2deef0ae

    • SHA256

      f351534a45b3321089730a7e3c1ef5d0eb70e2afd19a73752ff38d7999d81cb6

    • SHA512

      0a99d41f671c7d41f08bdcbeab761aefeebacbbc90d18c1eef0955e1c3d6c4757a4df33a6dc0b4863068876b53681b886e75db41d4f57768e9982c702aa1cf6f

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnH8h:m5nkFNMOtEvwDpjG8hgpH8h

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks