Overview

overview

10

Static

static

10

2024-04-15...er.exe

windows7-x64

9

2024-04-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-15_f2f9661acd9cc99d21fdd06243915100_cryptolocker

  • Size

    48KB

  • Sample

    240415-hjlzfagh94

  • MD5

    f2f9661acd9cc99d21fdd06243915100

  • SHA1

    2f66b17e35072fab63f8ea3b087570f47c4b3039

  • SHA256

    fa864149526596a1fcf6e346a48095a33e5f229112461609ef9c1f34cd5ed139

  • SHA512

    8bf07d842855f0c7f66e59a4fb516cdb8a7a1b268685d4e6da1da7b4ff9bc06af4a4543f747e39b37fca50820f93f60896c91ec03b110a631523b6a2baf9711d

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NOX:xj+VGMOtEvwDpjy+TN4w

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_f2f9661acd9cc99d21fdd06243915100_cryptolocker

    • Size

      48KB

    • MD5

      f2f9661acd9cc99d21fdd06243915100

    • SHA1

      2f66b17e35072fab63f8ea3b087570f47c4b3039

    • SHA256

      fa864149526596a1fcf6e346a48095a33e5f229112461609ef9c1f34cd5ed139

    • SHA512

      8bf07d842855f0c7f66e59a4fb516cdb8a7a1b268685d4e6da1da7b4ff9bc06af4a4543f747e39b37fca50820f93f60896c91ec03b110a631523b6a2baf9711d

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NOX:xj+VGMOtEvwDpjy+TN4w

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks