Overview

overview

10

Static

static

10

2024-06-01...er.exe

windows7-x64

9

2024-06-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-01_b49e786edc1116abb82ac9c36e299c16_cryptolocker

  • Size

    68KB

  • Sample

    240601-gwzwdscd2s

  • MD5

    b49e786edc1116abb82ac9c36e299c16

  • SHA1

    0c6f91458804328b49ae9818c184d8279f63061a

  • SHA256

    c553392c7c775d237625ceec32cda537fdcbe773a4c55b05f910f2259f71c014

  • SHA512

    490705df06274d36e24f7b0a30b693d308daf8c8f2c570d3f5f3cb7ee48dba5a5ffa123b39bbbf8ef73576f6338d28c3f18afcfea9d0002f6ea885802b15d5a3

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIT:6j+1NMOtEvwDpjr8ox8UDEpN/ja

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_b49e786edc1116abb82ac9c36e299c16_cryptolocker

    • Size

      68KB

    • MD5

      b49e786edc1116abb82ac9c36e299c16

    • SHA1

      0c6f91458804328b49ae9818c184d8279f63061a

    • SHA256

      c553392c7c775d237625ceec32cda537fdcbe773a4c55b05f910f2259f71c014

    • SHA512

      490705df06274d36e24f7b0a30b693d308daf8c8f2c570d3f5f3cb7ee48dba5a5ffa123b39bbbf8ef73576f6338d28c3f18afcfea9d0002f6ea885802b15d5a3

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIT:6j+1NMOtEvwDpjr8ox8UDEpN/ja

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks