Overview

overview

10

Static

static

10

2024-05-23...er.exe

windows7-x64

9

2024-05-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_240332263e3a7c8f4a3057bd3a5fb9aa_cryptolocker

  • Size

    96KB

  • Sample

    240523-brpa7sgd3v

  • MD5

    240332263e3a7c8f4a3057bd3a5fb9aa

  • SHA1

    6e24e48929e3c45b9aa9c211e70b4ba7424ca17d

  • SHA256

    9753932ae0403472f5e175eb38d560c61cf73ae3af55c3ec8ddcd5b3eec331ae

  • SHA512

    a10b2434c7eb498d8748b6e5771a1b86a96be41012d2bec1f445c8cc54f7f3d1400cfac612b6c5bcbb00b7d998b238a0e0b81f23b33febd1c7f8cd83a5fa2eba

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcT:xj+VGMOtEvwDpjubwQEI8UtzNcO8AcT

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_240332263e3a7c8f4a3057bd3a5fb9aa_cryptolocker

    • Size

      96KB

    • MD5

      240332263e3a7c8f4a3057bd3a5fb9aa

    • SHA1

      6e24e48929e3c45b9aa9c211e70b4ba7424ca17d

    • SHA256

      9753932ae0403472f5e175eb38d560c61cf73ae3af55c3ec8ddcd5b3eec331ae

    • SHA512

      a10b2434c7eb498d8748b6e5771a1b86a96be41012d2bec1f445c8cc54f7f3d1400cfac612b6c5bcbb00b7d998b238a0e0b81f23b33febd1c7f8cd83a5fa2eba

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcT:xj+VGMOtEvwDpjubwQEI8UtzNcO8AcT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks