Overview

overview

10

Static

static

10

2024-04-17...er.exe

windows7-x64

9

2024-04-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-17_c163183e3e4a7988e23b04266794ff28_cryptolocker

  • Size

    102KB

  • Sample

    240417-pnxeasgd7s

  • MD5

    c163183e3e4a7988e23b04266794ff28

  • SHA1

    97c0d6b8f8313cb41ab1c550c8aac086f804ab07

  • SHA256

    87e09687b2772b370c5a3158173d7dfbb72177cd720a81f24674ac5fe9a19461

  • SHA512

    bc36f161c927d5eb4ab4063be324e8e968be57c75e3017aeb5bc385f39a28d682ef5bc980bcc20ed980fecd4d3cc0da0a171b1e36ba51823de77c2530f7d298f

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMeI:xj+VGMOtEvwDpjubwQEIiVmkxv/LI

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_c163183e3e4a7988e23b04266794ff28_cryptolocker

    • Size

      102KB

    • MD5

      c163183e3e4a7988e23b04266794ff28

    • SHA1

      97c0d6b8f8313cb41ab1c550c8aac086f804ab07

    • SHA256

      87e09687b2772b370c5a3158173d7dfbb72177cd720a81f24674ac5fe9a19461

    • SHA512

      bc36f161c927d5eb4ab4063be324e8e968be57c75e3017aeb5bc385f39a28d682ef5bc980bcc20ed980fecd4d3cc0da0a171b1e36ba51823de77c2530f7d298f

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMeI:xj+VGMOtEvwDpjubwQEIiVmkxv/LI

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks