Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_4a6ba5cca4f542c3c6bf0ff8b4a8294e_cryptolocker

  • Size

    44KB

  • Sample

    240522-cz4arshf8s

  • MD5

    4a6ba5cca4f542c3c6bf0ff8b4a8294e

  • SHA1

    06009607f7d6c9341d934696116c742f42b76254

  • SHA256

    abcbf1df312087c1849600b16369845fcfc98bb958325df2808a92461929dbe5

  • SHA512

    9f30f1da48c36ece7efc4428e4008895c02cf56c22913eb9ce3487f21c675448786be8ba937222de9b53726f4eecab4444bbc97f998aece27cf227a1a796c65f

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDH:6j+1NMOtEvwDpjrRrb

Score
10/10

Malware Config

Targets

    • Target

      2024-05-22_4a6ba5cca4f542c3c6bf0ff8b4a8294e_cryptolocker

    • Size

      44KB

    • MD5

      4a6ba5cca4f542c3c6bf0ff8b4a8294e

    • SHA1

      06009607f7d6c9341d934696116c742f42b76254

    • SHA256

      abcbf1df312087c1849600b16369845fcfc98bb958325df2808a92461929dbe5

    • SHA512

      9f30f1da48c36ece7efc4428e4008895c02cf56c22913eb9ce3487f21c675448786be8ba937222de9b53726f4eecab4444bbc97f998aece27cf227a1a796c65f

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDH:6j+1NMOtEvwDpjrRrb

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks