Overview

overview

10

Static

static

10

2024-05-01...er.exe

windows7-x64

9

2024-05-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-01_3b16b434a1b3dfa65e77afda63da5286_cryptolocker

  • Size

    4.5MB

  • Sample

    240501-ywfk7afd4v

  • MD5

    3b16b434a1b3dfa65e77afda63da5286

  • SHA1

    e40e31734efd28f290f2b8dec3d25aceda551a02

  • SHA256

    42633e78bc1a43704f3708937cfa7f94c7ef2f16c7d4476f1333af92f109c230

  • SHA512

    1c3b0cbd59bc0bcc5ce0df690c099e05ae7febb92422f40ab97f08bb7085ed0951e6b8d4ffab88f3106347f92a6d5c3a07299beb3ba1bb03111edb11bb6ee589

  • SSDEEP

    98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTu:g/ZFIjBzF/ZFIjBzPEUusu

Score
10/10

Malware Config

Targets

    • Target

      2024-05-01_3b16b434a1b3dfa65e77afda63da5286_cryptolocker

    • Size

      4.5MB

    • MD5

      3b16b434a1b3dfa65e77afda63da5286

    • SHA1

      e40e31734efd28f290f2b8dec3d25aceda551a02

    • SHA256

      42633e78bc1a43704f3708937cfa7f94c7ef2f16c7d4476f1333af92f109c230

    • SHA512

      1c3b0cbd59bc0bcc5ce0df690c099e05ae7febb92422f40ab97f08bb7085ed0951e6b8d4ffab88f3106347f92a6d5c3a07299beb3ba1bb03111edb11bb6ee589

    • SSDEEP

      98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTu:g/ZFIjBzF/ZFIjBzPEUusu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks