Overview

overview

10

Static

static

10

2024-05-17...er.exe

windows7-x64

9

2024-05-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-17_698d255fc89389f51a1c09577f2da0ee_cryptolocker

  • Size

    43KB

  • Sample

    240517-e32bpahc9v

  • MD5

    698d255fc89389f51a1c09577f2da0ee

  • SHA1

    f53e94f761efc269ad4c1adefec228b279659cf3

  • SHA256

    448e0554b558847c7c5f5cabec0876044e4859a1bed00d4d2f619dca79ff54a6

  • SHA512

    c141d2abb671ece974d06ccf83ec831dd9ba004df1e04505f80407165507970a1d61938bb3300551ffa44f7e4d3fbbf3eca31975a3b8775b9ea4bc5b949fa799

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDz:6j+1NMOtEvwDpjrRo

Score
10/10

Malware Config

Targets

    • Target

      2024-05-17_698d255fc89389f51a1c09577f2da0ee_cryptolocker

    • Size

      43KB

    • MD5

      698d255fc89389f51a1c09577f2da0ee

    • SHA1

      f53e94f761efc269ad4c1adefec228b279659cf3

    • SHA256

      448e0554b558847c7c5f5cabec0876044e4859a1bed00d4d2f619dca79ff54a6

    • SHA512

      c141d2abb671ece974d06ccf83ec831dd9ba004df1e04505f80407165507970a1d61938bb3300551ffa44f7e4d3fbbf3eca31975a3b8775b9ea4bc5b949fa799

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDz:6j+1NMOtEvwDpjrRo

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks