Overview

overview

10

Static

static

10

2024-04-04...er.exe

windows7-x64

9

2024-04-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-04_f8a21a23c0dd25e96d9f86e88f04293d_cryptolocker

  • Size

    74KB

  • Sample

    240404-vlzpjadb6z

  • MD5

    f8a21a23c0dd25e96d9f86e88f04293d

  • SHA1

    c09bddb005dd56b2e57ba91616679928c2449c17

  • SHA256

    77461cb4bb10ec033703e89053a0567eaa84028950f171b26c024c00e34b7fef

  • SHA512

    9beadb3ac6dbcc06f8a84b591ee6b23b6714f9d7b068f9dbca0f175fda171d5f7d965fd4d40e908d44297d59ccd25691b83070494155f500d4a398e2e0aeb889

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUwN8yH:xj+VGMOtEvwDpjubwQEI8U48yH

Score
10/10

Malware Config

Targets

    • Target

      2024-04-04_f8a21a23c0dd25e96d9f86e88f04293d_cryptolocker

    • Size

      74KB

    • MD5

      f8a21a23c0dd25e96d9f86e88f04293d

    • SHA1

      c09bddb005dd56b2e57ba91616679928c2449c17

    • SHA256

      77461cb4bb10ec033703e89053a0567eaa84028950f171b26c024c00e34b7fef

    • SHA512

      9beadb3ac6dbcc06f8a84b591ee6b23b6714f9d7b068f9dbca0f175fda171d5f7d965fd4d40e908d44297d59ccd25691b83070494155f500d4a398e2e0aeb889

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUwN8yH:xj+VGMOtEvwDpjubwQEI8U48yH

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks