Overview

overview

10

Static

static

10

2024-05-16...er.exe

windows7-x64

9

2024-05-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-16_334316ae4b481aaa51dcebc5071073cd_cryptolocker

  • Size

    48KB

  • Sample

    240516-x9sl8scg39

  • MD5

    334316ae4b481aaa51dcebc5071073cd

  • SHA1

    0c3ede30a8c4cea9cafd96a6e39e964d133b6053

  • SHA256

    2a7a0893f01d79ab5b856eb6f6d36133d6e8c71c0962db4cca84ae2a402c0244

  • SHA512

    81b758fd877f56d56321582cde7bab8b01d2a6bb4204118b4cec04b7255d0c613d11f1c3577d07f70d4bbd4f91a09888c477fee008f70621e062cfd2b75d810a

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSP:XS5nQJ24LR1bytOOtEvwDpjNbP/bm29

Score
10/10

Malware Config

Targets

    • Target

      2024-05-16_334316ae4b481aaa51dcebc5071073cd_cryptolocker

    • Size

      48KB

    • MD5

      334316ae4b481aaa51dcebc5071073cd

    • SHA1

      0c3ede30a8c4cea9cafd96a6e39e964d133b6053

    • SHA256

      2a7a0893f01d79ab5b856eb6f6d36133d6e8c71c0962db4cca84ae2a402c0244

    • SHA512

      81b758fd877f56d56321582cde7bab8b01d2a6bb4204118b4cec04b7255d0c613d11f1c3577d07f70d4bbd4f91a09888c477fee008f70621e062cfd2b75d810a

    • SSDEEP

      384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSP:XS5nQJ24LR1bytOOtEvwDpjNbP/bm29

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks