Overview

overview

10

Static

static

10

2024-06-07...er.exe

windows7-x64

9

2024-06-07...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-07_e70c4e0437949859d603679e2b5ad8cd_cryptolocker

  • Size

    51KB

  • Sample

    240607-1d5hpsea98

  • MD5

    e70c4e0437949859d603679e2b5ad8cd

  • SHA1

    3b004b7e916c82a81be3b2c7c6589d77422e4428

  • SHA256

    0dd46e149afc23ed67a7282f034fc86d7648bb81fc9f5b0f24f49db6a3987b38

  • SHA512

    8c8969ed04a7abc876aef088a402dc580f31bdda8ad6d4e5aa13fc10752940d36538bae98433d82e8bb3920cca866bbaa04195a57e62a2724210f8d7a07112d8

  • SSDEEP

    768:lQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYshNhF:lj+VGMOtEvwDpjy+viHshND

Score
10/10

Malware Config

Targets

    • Target

      2024-06-07_e70c4e0437949859d603679e2b5ad8cd_cryptolocker

    • Size

      51KB

    • MD5

      e70c4e0437949859d603679e2b5ad8cd

    • SHA1

      3b004b7e916c82a81be3b2c7c6589d77422e4428

    • SHA256

      0dd46e149afc23ed67a7282f034fc86d7648bb81fc9f5b0f24f49db6a3987b38

    • SHA512

      8c8969ed04a7abc876aef088a402dc580f31bdda8ad6d4e5aa13fc10752940d36538bae98433d82e8bb3920cca866bbaa04195a57e62a2724210f8d7a07112d8

    • SSDEEP

      768:lQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYshNhF:lj+VGMOtEvwDpjy+viHshND

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks