Overview

overview

10

Static

static

10

2024-05-13...er.exe

windows7-x64

9

2024-05-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-13_39bff4e1a2988f51216d5923c5a85586_cryptolocker

  • Size

    43KB

  • Sample

    240513-x73pesbg27

  • MD5

    39bff4e1a2988f51216d5923c5a85586

  • SHA1

    2893102fabdd31c9c3b445b5e7b6b0548bec5ed0

  • SHA256

    dd2b2bfb2c033b50bb0895d43799980939e2985e4b521c170ddfa0613fd46096

  • SHA512

    ad312edbf335efca09028f2c9bd637519fcf6f5c72212ea38c0b0d0a00f481de2b48b84c75e5b9fffb42f09838c155d0ed1a286f7f99ef847e16bf2bdf7c1505

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRp5jX:m5nkFNMOtEvwDpjG8hhXj5r

Score
10/10

Malware Config

Targets

    • Target

      2024-05-13_39bff4e1a2988f51216d5923c5a85586_cryptolocker

    • Size

      43KB

    • MD5

      39bff4e1a2988f51216d5923c5a85586

    • SHA1

      2893102fabdd31c9c3b445b5e7b6b0548bec5ed0

    • SHA256

      dd2b2bfb2c033b50bb0895d43799980939e2985e4b521c170ddfa0613fd46096

    • SHA512

      ad312edbf335efca09028f2c9bd637519fcf6f5c72212ea38c0b0d0a00f481de2b48b84c75e5b9fffb42f09838c155d0ed1a286f7f99ef847e16bf2bdf7c1505

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRp5jX:m5nkFNMOtEvwDpjG8hhXj5r

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks