Overview

overview

10

Static

static

10

2024-04-15...er.exe

windows7-x64

9

2024-04-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-15_5a603362deb6c50b8f511bb0d39138fe_cryptolocker

  • Size

    40KB

  • Sample

    240415-cz473afa4s

  • MD5

    5a603362deb6c50b8f511bb0d39138fe

  • SHA1

    75e5f724ffa7f4dd9d3d4525c27853fd16fb6070

  • SHA256

    6acf124b598fe9ce59ad44548b3b5375732c064c2db3e1e7e249582f77ca7745

  • SHA512

    93432948e4b58d0aa9952bfd048a7afdffd0f2de0eceb6ecc9a68b958a3c7a44e11f7240d8d71c7b101133fce5c5ca1c0bc0d5c3acf56582d894646e173bb058

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYs5:i5nkFGMOtEvwDpjR+viHs5

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_5a603362deb6c50b8f511bb0d39138fe_cryptolocker

    • Size

      40KB

    • MD5

      5a603362deb6c50b8f511bb0d39138fe

    • SHA1

      75e5f724ffa7f4dd9d3d4525c27853fd16fb6070

    • SHA256

      6acf124b598fe9ce59ad44548b3b5375732c064c2db3e1e7e249582f77ca7745

    • SHA512

      93432948e4b58d0aa9952bfd048a7afdffd0f2de0eceb6ecc9a68b958a3c7a44e11f7240d8d71c7b101133fce5c5ca1c0bc0d5c3acf56582d894646e173bb058

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYs5:i5nkFGMOtEvwDpjR+viHs5

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks