Overview

overview

10

Static

static

10

2024-06-25...er.exe

windows7-x64

9

2024-06-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-25_664968faff801732d0258abf5efd4669_cryptolocker

  • Size

    43KB

  • Sample

    240625-z9agrstgmd

  • MD5

    664968faff801732d0258abf5efd4669

  • SHA1

    96ef9a787193820cf84ce2f2e808f2175be08821

  • SHA256

    a11c36e8472c167195baf447b452760047c3b035e46f4cb479c9eb7333e7e823

  • SHA512

    f9ae90581ab7db460e5c9bfc91aefb8206e6346334c01ff18f89791919cb920bbb497bf47d570f29219da798bb5609b99b0656045076cd73115e33f5b9025f93

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9p:m5nkFNMOtEvwDpjG8hgpY19p

Score
10/10

Malware Config

Targets

    • Target

      2024-06-25_664968faff801732d0258abf5efd4669_cryptolocker

    • Size

      43KB

    • MD5

      664968faff801732d0258abf5efd4669

    • SHA1

      96ef9a787193820cf84ce2f2e808f2175be08821

    • SHA256

      a11c36e8472c167195baf447b452760047c3b035e46f4cb479c9eb7333e7e823

    • SHA512

      f9ae90581ab7db460e5c9bfc91aefb8206e6346334c01ff18f89791919cb920bbb497bf47d570f29219da798bb5609b99b0656045076cd73115e33f5b9025f93

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9p:m5nkFNMOtEvwDpjG8hgpY19p

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks