Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_0be3f43e60001dc5bcc7de42136bf6ac_cryptolocker

  • Size

    51KB

  • Sample

    240521-rqdq3sha9s

  • MD5

    0be3f43e60001dc5bcc7de42136bf6ac

  • SHA1

    705d2b5c14498ae0d511c1ad46dea6356a2462a9

  • SHA256

    595b61953097562199f82c28c3d04b842c1c8020b9d9be438de9933e61977f18

  • SHA512

    0509c23fa50e7587368af2ef848397d37e17b55a0c750ee59baeaf91d03ee4b9089fd1e942295f680bfbfd1081524ade0a9df1e7622e900508548588f0d65961

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyy9:6j+1NMOtEvwDpjr8hhXy+iyy9

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_0be3f43e60001dc5bcc7de42136bf6ac_cryptolocker

    • Size

      51KB

    • MD5

      0be3f43e60001dc5bcc7de42136bf6ac

    • SHA1

      705d2b5c14498ae0d511c1ad46dea6356a2462a9

    • SHA256

      595b61953097562199f82c28c3d04b842c1c8020b9d9be438de9933e61977f18

    • SHA512

      0509c23fa50e7587368af2ef848397d37e17b55a0c750ee59baeaf91d03ee4b9089fd1e942295f680bfbfd1081524ade0a9df1e7622e900508548588f0d65961

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyy9:6j+1NMOtEvwDpjr8hhXy+iyy9

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks