Overview

overview

10

Static

static

10

2024-06-11...er.exe

windows7-x64

9

2024-06-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-11_6e78779a8b96834055416bb9404ed652_cryptolocker

  • Size

    70KB

  • Sample

    240611-x9pwcayekd

  • MD5

    6e78779a8b96834055416bb9404ed652

  • SHA1

    ac87204fa47b0e383ce0c0322df1622a935056ee

  • SHA256

    5ba73faaac13e81dd94a8f0d80d6b0231937edf1dfc2125b1309bafb44a3b2d2

  • SHA512

    46b6e3b5cf493404a6ee063953c87dc105f20888002a8c98835e144cd02377321ab6c54d2b6de6321dac8ba364011d18071c88276e7c1ba39b5102a9a0c30df4

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dy:i5nkFGMOtEvwDpjNbwQEI8UZDc

Score
10/10

Malware Config

Targets

    • Target

      2024-06-11_6e78779a8b96834055416bb9404ed652_cryptolocker

    • Size

      70KB

    • MD5

      6e78779a8b96834055416bb9404ed652

    • SHA1

      ac87204fa47b0e383ce0c0322df1622a935056ee

    • SHA256

      5ba73faaac13e81dd94a8f0d80d6b0231937edf1dfc2125b1309bafb44a3b2d2

    • SHA512

      46b6e3b5cf493404a6ee063953c87dc105f20888002a8c98835e144cd02377321ab6c54d2b6de6321dac8ba364011d18071c88276e7c1ba39b5102a9a0c30df4

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dy:i5nkFGMOtEvwDpjNbwQEI8UZDc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks