Overview

overview

10

Static

static

10

2024-05-10...er.exe

windows7-x64

9

2024-05-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-10_d38052ec8a2af54383ff72597a634328_cryptolocker

  • Size

    47KB

  • Sample

    240510-flbv5scc5z

  • MD5

    d38052ec8a2af54383ff72597a634328

  • SHA1

    33c735745440e28967228edf61bff8c9e096f502

  • SHA256

    570fba3a9dbb69757e67009b231908c8967a312440ec0dfbb49051c62800415b

  • SHA512

    3d945137d8ed38274a9a734bcbc80a75a17eb4138891814f7a1b70c5fbe364a82ffe804897c77095bc33132f066162899c7d3162d28b6a265f5acc0c5053765f

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSh:XS5nQJ24LR1bytOOtEvwDpjNbP/bmy

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_d38052ec8a2af54383ff72597a634328_cryptolocker

    • Size

      47KB

    • MD5

      d38052ec8a2af54383ff72597a634328

    • SHA1

      33c735745440e28967228edf61bff8c9e096f502

    • SHA256

      570fba3a9dbb69757e67009b231908c8967a312440ec0dfbb49051c62800415b

    • SHA512

      3d945137d8ed38274a9a734bcbc80a75a17eb4138891814f7a1b70c5fbe364a82ffe804897c77095bc33132f066162899c7d3162d28b6a265f5acc0c5053765f

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSh:XS5nQJ24LR1bytOOtEvwDpjNbP/bmy

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks