Overview

overview

10

Static

static

10

2024-05-25...er.exe

windows7-x64

9

2024-05-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-25_fd65c583e61e4dae9485ffd108fb236b_cryptolocker

  • Size

    69KB

  • Sample

    240525-l9bg6sdg35

  • MD5

    fd65c583e61e4dae9485ffd108fb236b

  • SHA1

    603aafba91687fc4f5a6fe073a717b593b089f09

  • SHA256

    981297116eef128192936cdaa612c9d519823ff485c21120c863d53e42b9e2f5

  • SHA512

    cffb0fb42c7f723041e8cb00e25177a940410d632f1db1bfb8ad794721fb8077be363898ec5833f2ee98a02e420e2b8e813e8abfcfff9ea865c879aae08ad3c6

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dK:i5nkFGMOtEvwDpjNbwQEI8UZD0

Score
10/10

Malware Config

Targets

    • Target

      2024-05-25_fd65c583e61e4dae9485ffd108fb236b_cryptolocker

    • Size

      69KB

    • MD5

      fd65c583e61e4dae9485ffd108fb236b

    • SHA1

      603aafba91687fc4f5a6fe073a717b593b089f09

    • SHA256

      981297116eef128192936cdaa612c9d519823ff485c21120c863d53e42b9e2f5

    • SHA512

      cffb0fb42c7f723041e8cb00e25177a940410d632f1db1bfb8ad794721fb8077be363898ec5833f2ee98a02e420e2b8e813e8abfcfff9ea865c879aae08ad3c6

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dK:i5nkFGMOtEvwDpjNbwQEI8UZD0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks