Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-27_e1601899c00fc147b3b459a1eb455f54_cryptolocker

  • Size

    74KB

  • Sample

    240327-wdaacahd49

  • MD5

    e1601899c00fc147b3b459a1eb455f54

  • SHA1

    eb719ab13485a0d2861de34155f24795f65232f5

  • SHA256

    9cb2d56cf33791560d3be875eb9e003f8e35af44522b2f8b6e3f7461f35ba076

  • SHA512

    71fc45023c49c631e0e9a2b1ca75afb627447feefb3589744003127cce5a3423816607a4ee8b98917dae9230e4da55c218be227c5b5631d40e2d01f67e4938a3

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUPz:xj+VGMOtEvwDpjubwQEI8UPz

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_e1601899c00fc147b3b459a1eb455f54_cryptolocker

    • Size

      74KB

    • MD5

      e1601899c00fc147b3b459a1eb455f54

    • SHA1

      eb719ab13485a0d2861de34155f24795f65232f5

    • SHA256

      9cb2d56cf33791560d3be875eb9e003f8e35af44522b2f8b6e3f7461f35ba076

    • SHA512

      71fc45023c49c631e0e9a2b1ca75afb627447feefb3589744003127cce5a3423816607a4ee8b98917dae9230e4da55c218be227c5b5631d40e2d01f67e4938a3

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUPz:xj+VGMOtEvwDpjubwQEI8UPz

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks