Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-09_48c4a1bdb470a526a59ecbda55108ba0_cryptolocker

  • Size

    65KB

  • Sample

    240409-bzpxpsdg9y

  • MD5

    48c4a1bdb470a526a59ecbda55108ba0

  • SHA1

    12fc4a0b2d50bfbe61e10bf7c12e7035ebc9f0be

  • SHA256

    1a5e4caef8e0dd10e30b257b5fa11b39cb241b11ee624b34005e2d8025b1acfb

  • SHA512

    e30ab46027495929cf1036efe9eb7816c2fda8fd6acdf5f8e4eeb888c9b7a0635c60886b09b5d66da69f741f48486ae0453e280c900c73c3f89cf9c698a6ee7a

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUI6A:i5nkFGMOtEvwDpjNbwQEI8UO

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_48c4a1bdb470a526a59ecbda55108ba0_cryptolocker

    • Size

      65KB

    • MD5

      48c4a1bdb470a526a59ecbda55108ba0

    • SHA1

      12fc4a0b2d50bfbe61e10bf7c12e7035ebc9f0be

    • SHA256

      1a5e4caef8e0dd10e30b257b5fa11b39cb241b11ee624b34005e2d8025b1acfb

    • SHA512

      e30ab46027495929cf1036efe9eb7816c2fda8fd6acdf5f8e4eeb888c9b7a0635c60886b09b5d66da69f741f48486ae0453e280c900c73c3f89cf9c698a6ee7a

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUI6A:i5nkFGMOtEvwDpjNbwQEI8UO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks