Overview

overview

10

Static

static

10

2024-06-14...er.exe

windows7-x64

9

2024-06-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-14_07d21d00dc8cfb4428b38317d4fe0db1_cryptolocker

  • Size

    43KB

  • Sample

    240614-jkyv3a1ana

  • MD5

    07d21d00dc8cfb4428b38317d4fe0db1

  • SHA1

    6f5df9e957ad8a219db5c211e63e7735814f716a

  • SHA256

    147d59cc08263c4331d4f31769e98700b84faef4e3f5b9bfb17f18579be93f09

  • SHA512

    a7b2c22f0701a771d3118fcef5fc02a6377eb335b22cc2398a5a85fbe5a83287d0059c4aef9246808f0ae8f6200b4b98801cfa07b17d1b5aab2e62b9c18ce7ca

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYsZnTK:i5nkFGMOtEvwDpjR+viHsM

Score
10/10

Malware Config

Targets

    • Target

      2024-06-14_07d21d00dc8cfb4428b38317d4fe0db1_cryptolocker

    • Size

      43KB

    • MD5

      07d21d00dc8cfb4428b38317d4fe0db1

    • SHA1

      6f5df9e957ad8a219db5c211e63e7735814f716a

    • SHA256

      147d59cc08263c4331d4f31769e98700b84faef4e3f5b9bfb17f18579be93f09

    • SHA512

      a7b2c22f0701a771d3118fcef5fc02a6377eb335b22cc2398a5a85fbe5a83287d0059c4aef9246808f0ae8f6200b4b98801cfa07b17d1b5aab2e62b9c18ce7ca

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYsZnTK:i5nkFGMOtEvwDpjR+viHsM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks