Overview

overview

10

Static

static

10

2024-05-15...er.exe

windows7-x64

9

2024-05-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-15_03d4638252ca65d62d5b258e088c644c_cryptolocker

  • Size

    69KB

  • Sample

    240515-dw88aafb67

  • MD5

    03d4638252ca65d62d5b258e088c644c

  • SHA1

    73c3289b9004beb372697d075a9e28e9bddd3cae

  • SHA256

    0444c8b65a3a0e405c4a381ba7c80feeefe65b8cac6f2dceea1abe08147ed5b1

  • SHA512

    10de79cf643a30e548d80d8dc48b163c96dcf5ffaf266e8fa47edefba3a91ed426895b8041383a6c07314a10d74ab041994fd6f2edd148e4e94093ecac0d3b57

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFzE:6j+1NMOtEvwDpjr8ox8UDEpN/jA

Score
10/10

Malware Config

Targets

    • Target

      2024-05-15_03d4638252ca65d62d5b258e088c644c_cryptolocker

    • Size

      69KB

    • MD5

      03d4638252ca65d62d5b258e088c644c

    • SHA1

      73c3289b9004beb372697d075a9e28e9bddd3cae

    • SHA256

      0444c8b65a3a0e405c4a381ba7c80feeefe65b8cac6f2dceea1abe08147ed5b1

    • SHA512

      10de79cf643a30e548d80d8dc48b163c96dcf5ffaf266e8fa47edefba3a91ed426895b8041383a6c07314a10d74ab041994fd6f2edd148e4e94093ecac0d3b57

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFzE:6j+1NMOtEvwDpjr8ox8UDEpN/jA

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks