Overview

overview

10

Static

static

10

2024-05-09...er.exe

windows7-x64

9

2024-05-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-09_86d8edbe088ce4211d7bef6acf3d1267_cryptolocker

  • Size

    67KB

  • Sample

    240509-r7ckcafc5t

  • MD5

    86d8edbe088ce4211d7bef6acf3d1267

  • SHA1

    fc0fcb3f1c696866bfa936a729b660e6b5b1540e

  • SHA256

    78914fc22863f775fd96465d39908d47db9b4a6823a7cdd89469efe86d4671f5

  • SHA512

    203dbba1a1baf6b18dade20c70138b96bfb6676d8c12230a192db06168c80e7340b2eb0f30ca74a066071cd058b583a9a8ee908b2f6100407b6763d595865a6c

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/b:i5nkFGMOtEvwDpjNbwQEI8UZDT

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_86d8edbe088ce4211d7bef6acf3d1267_cryptolocker

    • Size

      67KB

    • MD5

      86d8edbe088ce4211d7bef6acf3d1267

    • SHA1

      fc0fcb3f1c696866bfa936a729b660e6b5b1540e

    • SHA256

      78914fc22863f775fd96465d39908d47db9b4a6823a7cdd89469efe86d4671f5

    • SHA512

      203dbba1a1baf6b18dade20c70138b96bfb6676d8c12230a192db06168c80e7340b2eb0f30ca74a066071cd058b583a9a8ee908b2f6100407b6763d595865a6c

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/b:i5nkFGMOtEvwDpjNbwQEI8UZDT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks