Overview

overview

10

Static

static

10

2024-05-09...er.exe

windows7-x64

9

2024-05-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-09_a19f326ce70437092f0bb92291b6ea11_cryptolocker

  • Size

    42KB

  • Sample

    240509-ms1leagb55

  • MD5

    a19f326ce70437092f0bb92291b6ea11

  • SHA1

    8acb3863ff52e209eb469d5b3eef57164f4d65fe

  • SHA256

    0316f2e3ac3d423dea6d62c0f215804d9a73c7aa2bf922758d1cb14ec5ba2a8c

  • SHA512

    8a6cd77917a11fe652b7a8d09447a8cf496aae57584051afb66e050cfa2ba90f4a8c54cdd792181c042e6565fd7674bf9f7610c0642395808dc71f85b6a1f1b3

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabMwQ:6j+1NMOtEvwDpjrR2XabMwQ

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_a19f326ce70437092f0bb92291b6ea11_cryptolocker

    • Size

      42KB

    • MD5

      a19f326ce70437092f0bb92291b6ea11

    • SHA1

      8acb3863ff52e209eb469d5b3eef57164f4d65fe

    • SHA256

      0316f2e3ac3d423dea6d62c0f215804d9a73c7aa2bf922758d1cb14ec5ba2a8c

    • SHA512

      8a6cd77917a11fe652b7a8d09447a8cf496aae57584051afb66e050cfa2ba90f4a8c54cdd792181c042e6565fd7674bf9f7610c0642395808dc71f85b6a1f1b3

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabMwQ:6j+1NMOtEvwDpjrR2XabMwQ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks