Overview

overview

10

Static

static

10

2024-04-27...er.exe

windows7-x64

9

2024-04-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_bade64ac6c234b2905a63d3130af2b14_cryptolocker

  • Size

    50KB

  • Sample

    240427-ftr74ace6w

  • MD5

    bade64ac6c234b2905a63d3130af2b14

  • SHA1

    53a8efc27e559c7f673be7fa0094a32bfd21a5d1

  • SHA256

    478747744eed9fe756b57e20e1268eccdd90bac708ea16b5f5426246c57bf663

  • SHA512

    7d6d4cfc22c5e28a812bcb2ae3e162e7ff446c5df82ddbd5f74fa77c4953121314e1a00c8413f38c4f9702662d91d9479d838fb9f157d5dd6cf2049240e7a225

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRHnzC5:6j+1NMOtEvwDpjr8hhX9u5

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_bade64ac6c234b2905a63d3130af2b14_cryptolocker

    • Size

      50KB

    • MD5

      bade64ac6c234b2905a63d3130af2b14

    • SHA1

      53a8efc27e559c7f673be7fa0094a32bfd21a5d1

    • SHA256

      478747744eed9fe756b57e20e1268eccdd90bac708ea16b5f5426246c57bf663

    • SHA512

      7d6d4cfc22c5e28a812bcb2ae3e162e7ff446c5df82ddbd5f74fa77c4953121314e1a00c8413f38c4f9702662d91d9479d838fb9f157d5dd6cf2049240e7a225

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRHnzC5:6j+1NMOtEvwDpjr8hhX9u5

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks