Overview

overview

10

Static

static

10

2024-05-10...er.exe

windows7-x64

9

2024-05-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-10_9aa132bb018e7e7d449384bff3ed3891_cryptolocker

  • Size

    48KB

  • Sample

    240510-jkmg2aec87

  • MD5

    9aa132bb018e7e7d449384bff3ed3891

  • SHA1

    5da55fedaddee9f3c892fc006458a843a1419213

  • SHA256

    8ea8889de43e780e567a9baf24663997cd6f29e723fc8f1ef034c04403db09ad

  • SHA512

    278c44435b7876b727e1468cd2b6c1406eac8e6d0315aa870a088b1a745a60835c4c548f762347a190ffd0093fa77024e9e2818342f6efd59db5b8b7bebba229

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRh7ihx:xj+VGMOtEvwDpjy+TRh7in

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_9aa132bb018e7e7d449384bff3ed3891_cryptolocker

    • Size

      48KB

    • MD5

      9aa132bb018e7e7d449384bff3ed3891

    • SHA1

      5da55fedaddee9f3c892fc006458a843a1419213

    • SHA256

      8ea8889de43e780e567a9baf24663997cd6f29e723fc8f1ef034c04403db09ad

    • SHA512

      278c44435b7876b727e1468cd2b6c1406eac8e6d0315aa870a088b1a745a60835c4c548f762347a190ffd0093fa77024e9e2818342f6efd59db5b8b7bebba229

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRh7ihx:xj+VGMOtEvwDpjy+TRh7in

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks