Overview

overview

7

Static

static

3

2024-01-06...er.exe

windows7-x64

7

2024-01-06...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-06_b3f8a74425b34dfa6e9187e9a0696ce5_cryptolocker

  • Size

    38KB

  • Sample

    240107-pe1qcsfee7

  • MD5

    b3f8a74425b34dfa6e9187e9a0696ce5

  • SHA1

    51d6ee28e30157f13643422eabfe7787912c47c6

  • SHA256

    a7c1a93e270531b4a61c0d7be268854c95da833a8ee3f58f517e76dace84d1ba

  • SHA512

    581a24dd9b0e4c46570c75515a11c06129c0ee4892f59cbf153a319e3717bbc5a0c004e466a7725a883ac824e84db1af9562e8a4d7e5c36f44ab5e12106dd2a9

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxub9Aq:b/yC4GyNM01GuQMNXw2PSjHPbSuYl0yq

Score
7/10
discovery

Malware Config

Targets

    • Target

      2024-01-06_b3f8a74425b34dfa6e9187e9a0696ce5_cryptolocker

    • Size

      38KB

    • MD5

      b3f8a74425b34dfa6e9187e9a0696ce5

    • SHA1

      51d6ee28e30157f13643422eabfe7787912c47c6

    • SHA256

      a7c1a93e270531b4a61c0d7be268854c95da833a8ee3f58f517e76dace84d1ba

    • SHA512

      581a24dd9b0e4c46570c75515a11c06129c0ee4892f59cbf153a319e3717bbc5a0c004e466a7725a883ac824e84db1af9562e8a4d7e5c36f44ab5e12106dd2a9

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxub9Aq:b/yC4GyNM01GuQMNXw2PSjHPbSuYl0yq

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks