Overview

overview

10

Static

static

10

2024-05-01...er.exe

windows7-x64

9

2024-05-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-01_ee70be7dbd1150941cada98b0c6038ef_cryptolocker

  • Size

    55KB

  • Sample

    240501-2desqahd3t

  • MD5

    ee70be7dbd1150941cada98b0c6038ef

  • SHA1

    fde73776093984d9cc4367bbaee066ac2ebc6fa7

  • SHA256

    61570a44a91d042e01ca9ba65e51aeaaca6988666da29ac386c2ebe2d8c5b5ed

  • SHA512

    07d8f567c796ade45f6b40856fe68ee35b04cdcd9e2f53effec4e793b955cf678b4c7cfae873996decb9371e92af5d914e88cc704e5e7458bd1daff6a21f892f

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eKR0:6j+1NMOtEvwDpjr8oxExeKO

Score
10/10

Malware Config

Targets

    • Target

      2024-05-01_ee70be7dbd1150941cada98b0c6038ef_cryptolocker

    • Size

      55KB

    • MD5

      ee70be7dbd1150941cada98b0c6038ef

    • SHA1

      fde73776093984d9cc4367bbaee066ac2ebc6fa7

    • SHA256

      61570a44a91d042e01ca9ba65e51aeaaca6988666da29ac386c2ebe2d8c5b5ed

    • SHA512

      07d8f567c796ade45f6b40856fe68ee35b04cdcd9e2f53effec4e793b955cf678b4c7cfae873996decb9371e92af5d914e88cc704e5e7458bd1daff6a21f892f

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eKR0:6j+1NMOtEvwDpjr8oxExeKO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks