Overview

overview

10

Static

static

10

2024-04-20...er.exe

windows7-x64

9

2024-04-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-20_220d8213088c877ad43ef6153d4f10ff_cryptolocker

  • Size

    102KB

  • Sample

    240420-w47crsfb9s

  • MD5

    220d8213088c877ad43ef6153d4f10ff

  • SHA1

    5571f044294050102295afd0f2982501ad3624de

  • SHA256

    688a5525dad13c988d323cec136962bcfc3ed2897c6f2626c4ebcd3e9671cab0

  • SHA512

    ec085b53c953083ac4c8a1184b33c71ae4193d22cbae962952818906f6a941193b0ea5481fbe3dc86ed58b32611ac152dd9b5ddd1722caecb3175525d4ab99b3

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMeo9:xj+VGMOtEvwDpjubwQEIiVmkxv/Lo9

Score
10/10

Malware Config

Targets

    • Target

      2024-04-20_220d8213088c877ad43ef6153d4f10ff_cryptolocker

    • Size

      102KB

    • MD5

      220d8213088c877ad43ef6153d4f10ff

    • SHA1

      5571f044294050102295afd0f2982501ad3624de

    • SHA256

      688a5525dad13c988d323cec136962bcfc3ed2897c6f2626c4ebcd3e9671cab0

    • SHA512

      ec085b53c953083ac4c8a1184b33c71ae4193d22cbae962952818906f6a941193b0ea5481fbe3dc86ed58b32611ac152dd9b5ddd1722caecb3175525d4ab99b3

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMeo9:xj+VGMOtEvwDpjubwQEIiVmkxv/Lo9

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks