Overview

overview

10

Static

static

10

2024-04-26...er.exe

windows7-x64

9

2024-04-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-26_439b5ef9683aef8e3a42129fdc1d658e_cryptolocker

  • Size

    49KB

  • Sample

    240426-d6cl3ahe78

  • MD5

    439b5ef9683aef8e3a42129fdc1d658e

  • SHA1

    302685b0b365188331230307cbab33899ffc8d02

  • SHA256

    aa0d3999f9dc74e82527ee86fb6e177f3de4ae3043691ecbc94ace69bb13ec79

  • SHA512

    573231a3ff43819ee75e4c8fbbb3dc2ef976c28ebb27dd54d975d3d526b68c1e9e22a24488d7c2f497963013b2152594fea6722f1b48578f384ab7fe9a9aa959

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NO9:xj+VGMOtEvwDpjy+TN4W

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_439b5ef9683aef8e3a42129fdc1d658e_cryptolocker

    • Size

      49KB

    • MD5

      439b5ef9683aef8e3a42129fdc1d658e

    • SHA1

      302685b0b365188331230307cbab33899ffc8d02

    • SHA256

      aa0d3999f9dc74e82527ee86fb6e177f3de4ae3043691ecbc94ace69bb13ec79

    • SHA512

      573231a3ff43819ee75e4c8fbbb3dc2ef976c28ebb27dd54d975d3d526b68c1e9e22a24488d7c2f497963013b2152594fea6722f1b48578f384ab7fe9a9aa959

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NO9:xj+VGMOtEvwDpjy+TN4W

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks