Overview

overview

10

Static

static

10

2024-04-27...er.exe

windows7-x64

9

2024-04-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_acd3dbe861aac662bbda225f613e0e83_cryptolocker

  • Size

    42KB

  • Sample

    240427-w38jfaee7t

  • MD5

    acd3dbe861aac662bbda225f613e0e83

  • SHA1

    86b44009bb30ec4e186ed94f5fc7db7de65bfd7d

  • SHA256

    e0f6c9e95622993abc4a3b12a2899a389a5fb879184c2ba31ceb8afb50f03d35

  • SHA512

    ed9bad1edb8463915d8783ebcb55b460dd132825f3cb01636b447529d7ad7c4e0a176357b053a743991485ffb65677042f0945426fe2a405d18d5778ee63dc5b

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0A:6j+1NMOtEvwDpjrR2XabM0A

Score
10/10

Malware Config

Targets

    • Target

      2024-04-27_acd3dbe861aac662bbda225f613e0e83_cryptolocker

    • Size

      42KB

    • MD5

      acd3dbe861aac662bbda225f613e0e83

    • SHA1

      86b44009bb30ec4e186ed94f5fc7db7de65bfd7d

    • SHA256

      e0f6c9e95622993abc4a3b12a2899a389a5fb879184c2ba31ceb8afb50f03d35

    • SHA512

      ed9bad1edb8463915d8783ebcb55b460dd132825f3cb01636b447529d7ad7c4e0a176357b053a743991485ffb65677042f0945426fe2a405d18d5778ee63dc5b

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0A:6j+1NMOtEvwDpjrR2XabM0A

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks