Overview

overview

10

Static

static

10

2024-04-24...er.exe

windows7-x64

9

2024-04-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-24_5210190eba8b9a89f2fe051d12c336e2_cryptolocker

  • Size

    50KB

  • Sample

    240424-jabyjsff93

  • MD5

    5210190eba8b9a89f2fe051d12c336e2

  • SHA1

    11617a434af078122f8ff20c07df134f3837f3a4

  • SHA256

    b84c31a5a1623f1632f633aa2bdddb2fec619346f9a7ceca3c81020f93c4220a

  • SHA512

    89ede0ae6bee4eeff0d40940dc086aa30e848d80313c6853a30c865b7abdd64d8390be5a479d147ced1918c9fc9e071fa7ef8f36fa8f2ff7707f8efbf73b8666

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvgpneNUa/nOBP6:6j+1NMOtEvwDpjr8hgpeNZGBC

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_5210190eba8b9a89f2fe051d12c336e2_cryptolocker

    • Size

      50KB

    • MD5

      5210190eba8b9a89f2fe051d12c336e2

    • SHA1

      11617a434af078122f8ff20c07df134f3837f3a4

    • SHA256

      b84c31a5a1623f1632f633aa2bdddb2fec619346f9a7ceca3c81020f93c4220a

    • SHA512

      89ede0ae6bee4eeff0d40940dc086aa30e848d80313c6853a30c865b7abdd64d8390be5a479d147ced1918c9fc9e071fa7ef8f36fa8f2ff7707f8efbf73b8666

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvgpneNUa/nOBP6:6j+1NMOtEvwDpjr8hgpeNZGBC

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks