Overview

overview

10

Static

static

10

2024-06-11...er.exe

windows7-x64

9

2024-06-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-11_dde7dae7bf9fafbbf7b496d38c1df9d2_cryptolocker

  • Size

    44KB

  • Sample

    240611-kmwzxs1gjp

  • MD5

    dde7dae7bf9fafbbf7b496d38c1df9d2

  • SHA1

    ac4ec5140ceecbc367ad6f8c891320a94d12a40d

  • SHA256

    7ab756af507529c6849d6421437ed2c35b30d36b8c360ffc478cb2236d272c0c

  • SHA512

    86407f32c36122e6c726b2925df7ea31064d4c01787b5eca3b96d8f09f570657a0ec270bb5dff6327c17f615deea69ae8d37269ca64d6b5c2f54ea7d9193a880

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDf:6j+1NMOtEvwDpjrRM

Score
10/10

Malware Config

Targets

    • Target

      2024-06-11_dde7dae7bf9fafbbf7b496d38c1df9d2_cryptolocker

    • Size

      44KB

    • MD5

      dde7dae7bf9fafbbf7b496d38c1df9d2

    • SHA1

      ac4ec5140ceecbc367ad6f8c891320a94d12a40d

    • SHA256

      7ab756af507529c6849d6421437ed2c35b30d36b8c360ffc478cb2236d272c0c

    • SHA512

      86407f32c36122e6c726b2925df7ea31064d4c01787b5eca3b96d8f09f570657a0ec270bb5dff6327c17f615deea69ae8d37269ca64d6b5c2f54ea7d9193a880

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDf:6j+1NMOtEvwDpjrRM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks