Overview

overview

10

Static

static

10

2024-04-19...er.exe

windows7-x64

9

2024-04-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-19_3cb90629111b68b5a03878956ce35f3c_cryptolocker

  • Size

    55KB

  • Sample

    240419-lfansaef2x

  • MD5

    3cb90629111b68b5a03878956ce35f3c

  • SHA1

    8b03593a7a9eecb342a2dbac60c386216164ac5f

  • SHA256

    d16f3e1901992f27d644794320e476e134a6c7821a8599d25937b2cd83e4a023

  • SHA512

    23557a2e5dd0889772c909d9049188413ac6a26ff10c75db89c99076ed35e9595913ecf6e420f9c7ea478493d3e89627d9fdbae6a1e90522071762d31057be6b

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eq:6j+1NMOtEvwDpjr8oxExeq

Score
10/10

Malware Config

Targets

    • Target

      2024-04-19_3cb90629111b68b5a03878956ce35f3c_cryptolocker

    • Size

      55KB

    • MD5

      3cb90629111b68b5a03878956ce35f3c

    • SHA1

      8b03593a7a9eecb342a2dbac60c386216164ac5f

    • SHA256

      d16f3e1901992f27d644794320e476e134a6c7821a8599d25937b2cd83e4a023

    • SHA512

      23557a2e5dd0889772c909d9049188413ac6a26ff10c75db89c99076ed35e9595913ecf6e420f9c7ea478493d3e89627d9fdbae6a1e90522071762d31057be6b

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eq:6j+1NMOtEvwDpjr8oxExeq

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks