Overview

overview

10

Static

static

10

2024-04-10...er.exe

windows7-x64

9

2024-04-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-10_eb095954f04107f4801ef86b11fa4a13_cryptolocker

  • Size

    39KB

  • Sample

    240410-eldjasch77

  • MD5

    eb095954f04107f4801ef86b11fa4a13

  • SHA1

    c96d89cc81219a1c03c5756b2f18f1de2fc35702

  • SHA256

    62d80ef4d656e5b78e230492292477c25272bba8719884046ac6bdb9bfd93ae6

  • SHA512

    e81fbc7a97c1c0dcbdc7ccfcfd2c5aad800084cc2c67a51eb40e83af72d9c003543b0c8940df62072b744524cf1463ca5870692349e0d683ddc9b1bc0c86ef79

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnv00Gxm8:m5nkFNMOtEvwDpjG8h00Gxm8

Score
10/10

Malware Config

Targets

    • Target

      2024-04-10_eb095954f04107f4801ef86b11fa4a13_cryptolocker

    • Size

      39KB

    • MD5

      eb095954f04107f4801ef86b11fa4a13

    • SHA1

      c96d89cc81219a1c03c5756b2f18f1de2fc35702

    • SHA256

      62d80ef4d656e5b78e230492292477c25272bba8719884046ac6bdb9bfd93ae6

    • SHA512

      e81fbc7a97c1c0dcbdc7ccfcfd2c5aad800084cc2c67a51eb40e83af72d9c003543b0c8940df62072b744524cf1463ca5870692349e0d683ddc9b1bc0c86ef79

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnv00Gxm8:m5nkFNMOtEvwDpjG8h00Gxm8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks