Overview

overview

10

Static

static

10

2024-05-10...er.exe

windows7-x64

9

2024-05-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-10_0911adc67dfaf309e208d0a4381c4875_cryptolocker

  • Size

    42KB

  • Sample

    240510-e1cwbaea89

  • MD5

    0911adc67dfaf309e208d0a4381c4875

  • SHA1

    1dde2e935cd3888d6f3cb4df89ac52746cdb12a0

  • SHA256

    5ddb5fc47fafabf7c528f3db2803adbc9ae60d089c189c10965b7063c0cc19b0

  • SHA512

    d544106f97720c1b7f6ebe28317f88d9139c7fe21f19be32437b3e9114ea6aed5c2c479a428c3b32a6d606e76c9785b0f8cc36e92df59b4233287709a7bdb731

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDE:6j+1NMOtEvwDpjrRX

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_0911adc67dfaf309e208d0a4381c4875_cryptolocker

    • Size

      42KB

    • MD5

      0911adc67dfaf309e208d0a4381c4875

    • SHA1

      1dde2e935cd3888d6f3cb4df89ac52746cdb12a0

    • SHA256

      5ddb5fc47fafabf7c528f3db2803adbc9ae60d089c189c10965b7063c0cc19b0

    • SHA512

      d544106f97720c1b7f6ebe28317f88d9139c7fe21f19be32437b3e9114ea6aed5c2c479a428c3b32a6d606e76c9785b0f8cc36e92df59b4233287709a7bdb731

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDE:6j+1NMOtEvwDpjrRX

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks