Overview

overview

10

Static

static

10

2024-05-25...er.exe

windows7-x64

9

2024-05-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-25_1dbb7388412c46fb9930cf9bba45e45e_cryptolocker

  • Size

    68KB

  • Sample

    240525-xdxajsee34

  • MD5

    1dbb7388412c46fb9930cf9bba45e45e

  • SHA1

    47068f6c240737a9b4473d713f401cdcec9d4b3e

  • SHA256

    9f6e7d8708c98aacbd7c068107cbeef2a55d3794527f1dfc6a25d66510e3e4af

  • SHA512

    0d3836dc75369f4893926a5352ed4c8985e5a0999a0f653e8f3aeac0bdf55007c24b9f5714a1868f0d1b3de2ad5042501a8353139a5038e02fd0f09f6ab931a2

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIn:6j+1NMOtEvwDpjr8ox8UDEpN/ju

Score
10/10

Malware Config

Targets

    • Target

      2024-05-25_1dbb7388412c46fb9930cf9bba45e45e_cryptolocker

    • Size

      68KB

    • MD5

      1dbb7388412c46fb9930cf9bba45e45e

    • SHA1

      47068f6c240737a9b4473d713f401cdcec9d4b3e

    • SHA256

      9f6e7d8708c98aacbd7c068107cbeef2a55d3794527f1dfc6a25d66510e3e4af

    • SHA512

      0d3836dc75369f4893926a5352ed4c8985e5a0999a0f653e8f3aeac0bdf55007c24b9f5714a1868f0d1b3de2ad5042501a8353139a5038e02fd0f09f6ab931a2

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIn:6j+1NMOtEvwDpjr8ox8UDEpN/ju

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks