Overview

overview

10

Static

static

10

2024-04-23...er.exe

windows7-x64

9

2024-04-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-23_9217a855a330a75c561e0fd946bda3ea_cryptolocker

  • Size

    50KB

  • Sample

    240423-w3prbsaf71

  • MD5

    9217a855a330a75c561e0fd946bda3ea

  • SHA1

    ec5b063df550fe840ed4adae3dac11ee9c903f81

  • SHA256

    e1da6ba84441bd1fe09bd80ab1ab0538140caa71e36ba4e97dbe32b324ff8997

  • SHA512

    d9798535d408318f3f042c19d4fe4f5163a399712cdc042aaf324395a01e81bba1f9a32a5993e54ca746c1174e7c8d6fd9fd1f765d5430c8d37d844c4df9fd17

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRp5jvbf:6j+1NMOtEvwDpjr8hhXj53f

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_9217a855a330a75c561e0fd946bda3ea_cryptolocker

    • Size

      50KB

    • MD5

      9217a855a330a75c561e0fd946bda3ea

    • SHA1

      ec5b063df550fe840ed4adae3dac11ee9c903f81

    • SHA256

      e1da6ba84441bd1fe09bd80ab1ab0538140caa71e36ba4e97dbe32b324ff8997

    • SHA512

      d9798535d408318f3f042c19d4fe4f5163a399712cdc042aaf324395a01e81bba1f9a32a5993e54ca746c1174e7c8d6fd9fd1f765d5430c8d37d844c4df9fd17

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRp5jvbf:6j+1NMOtEvwDpjr8hhXj53f

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks