Overview

overview

10

Static

static

10

2024-05-10...er.exe

windows7-x64

9

2024-05-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-10_1d353703106406b9e64ed7b5dca2d95f_cryptolocker

  • Size

    95KB

  • Sample

    240510-h88vhaab91

  • MD5

    1d353703106406b9e64ed7b5dca2d95f

  • SHA1

    4643f1de61b65a8b86063182c29f61bad99233b2

  • SHA256

    e57d7d235d04c418345ff7cbb18b6dfc2cbaa4402d0119dbcd65e60e6cdaca7c

  • SHA512

    564be489e0a67a29cbfd900283cdfc40234d9e386fee3f777b5ce6ca0d6c0efa278957097eef1b98e4565df1eb2e62269ebcfda267ebca90690f0907c514146c

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYt:xj+VGMOtEvwDpjubwQEIiVmkst

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_1d353703106406b9e64ed7b5dca2d95f_cryptolocker

    • Size

      95KB

    • MD5

      1d353703106406b9e64ed7b5dca2d95f

    • SHA1

      4643f1de61b65a8b86063182c29f61bad99233b2

    • SHA256

      e57d7d235d04c418345ff7cbb18b6dfc2cbaa4402d0119dbcd65e60e6cdaca7c

    • SHA512

      564be489e0a67a29cbfd900283cdfc40234d9e386fee3f777b5ce6ca0d6c0efa278957097eef1b98e4565df1eb2e62269ebcfda267ebca90690f0907c514146c

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYt:xj+VGMOtEvwDpjubwQEIiVmkst

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks