Overview

overview

10

Static

static

10

2024-05-17...er.exe

windows7-x64

9

2024-05-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-17_dc03b51ac3e4cad6c997293bf6bb14ec_cryptolocker

  • Size

    67KB

  • Sample

    240517-qxwpssaf9s

  • MD5

    dc03b51ac3e4cad6c997293bf6bb14ec

  • SHA1

    9e9339998f3a571fb6d2ab8775b6f93ee4c5b52b

  • SHA256

    b598907b0e7fb05829c8bbc0e6f27f7d91e7b3bf8ba62797210793e61b310746

  • SHA512

    3968104cf5c9d023120cb8689a7c4dc6c1c7404e0e0fd76669f2220f74b6bc8c54d445d0a6febac12410bb8dd35c766714232389541c66e86c49d5e63fc156e5

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIYD:6j+1NMOtEvwDpjr8ox8UDEpN/j7

Score
10/10

Malware Config

Targets

    • Target

      2024-05-17_dc03b51ac3e4cad6c997293bf6bb14ec_cryptolocker

    • Size

      67KB

    • MD5

      dc03b51ac3e4cad6c997293bf6bb14ec

    • SHA1

      9e9339998f3a571fb6d2ab8775b6f93ee4c5b52b

    • SHA256

      b598907b0e7fb05829c8bbc0e6f27f7d91e7b3bf8ba62797210793e61b310746

    • SHA512

      3968104cf5c9d023120cb8689a7c4dc6c1c7404e0e0fd76669f2220f74b6bc8c54d445d0a6febac12410bb8dd35c766714232389541c66e86c49d5e63fc156e5

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIYD:6j+1NMOtEvwDpjr8ox8UDEpN/j7

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks