Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_ababf9fc0e43654b028ec870c31defd5_cryptolocker

  • Size

    44KB

  • Sample

    240522-c77yxshg86

  • MD5

    ababf9fc0e43654b028ec870c31defd5

  • SHA1

    6a555866e5f70b903fb27c963e0afb8952249d36

  • SHA256

    8062ffa57ba243dc3164d11e99b9401da5811d7a90feb3434caf249392571965

  • SHA512

    6dfd0ff3c3f0ab027d2a09015b64cd4a918f50acabcbada7f230f4c3e7e203b3423cd25f1030f21a64aedc6cf577e0b45f2a6f9f54b8097f60e65a8efce79daf

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDT:6j+1NMOtEvwDpjrRr/

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_ababf9fc0e43654b028ec870c31defd5_cryptolocker

    • Size

      44KB

    • MD5

      ababf9fc0e43654b028ec870c31defd5

    • SHA1

      6a555866e5f70b903fb27c963e0afb8952249d36

    • SHA256

      8062ffa57ba243dc3164d11e99b9401da5811d7a90feb3434caf249392571965

    • SHA512

      6dfd0ff3c3f0ab027d2a09015b64cd4a918f50acabcbada7f230f4c3e7e203b3423cd25f1030f21a64aedc6cf577e0b45f2a6f9f54b8097f60e65a8efce79daf

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDT:6j+1NMOtEvwDpjrRr/

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks