Overview

overview

7

Static

static

3

2024-01-08...er.exe

windows7-x64

7

2024-01-08...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-08_e866b93157185f803975fb8ac4c9ad4f_cryptolocker

  • Size

    33KB

  • Sample

    240109-hlphcagdcm

  • MD5

    e866b93157185f803975fb8ac4c9ad4f

  • SHA1

    6757d42510ad9d146aded687d294ad85bd79fbb0

  • SHA256

    a5d5a4deba403e47ac18ad1ec17eb6f36e7bd1aea1628463bf59adc80400f4bf

  • SHA512

    9a442368c235ceff760efa421cfe4ac72da94b70fbd8d024e2f367e4aa0afd41a122bb77e8a3587656fa34e819e806e59d82031950439c7ba6591c3b7f95bbd1

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEEr9VE/cM:b/yC4GyNM01GuQMNXw2PSjSKEBVE/cM

Score
7/10
discovery

Malware Config

Targets

    • Target

      2024-01-08_e866b93157185f803975fb8ac4c9ad4f_cryptolocker

    • Size

      33KB

    • MD5

      e866b93157185f803975fb8ac4c9ad4f

    • SHA1

      6757d42510ad9d146aded687d294ad85bd79fbb0

    • SHA256

      a5d5a4deba403e47ac18ad1ec17eb6f36e7bd1aea1628463bf59adc80400f4bf

    • SHA512

      9a442368c235ceff760efa421cfe4ac72da94b70fbd8d024e2f367e4aa0afd41a122bb77e8a3587656fa34e819e806e59d82031950439c7ba6591c3b7f95bbd1

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEEr9VE/cM:b/yC4GyNM01GuQMNXw2PSjSKEBVE/cM

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks