Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-18_b8a58041a9532abad7d7a791d2392eab_cryptolocker

  • Size

    37KB

  • Sample

    240118-29kzlsfhe6

  • MD5

    b8a58041a9532abad7d7a791d2392eab

  • SHA1

    1b364a95688a0263610c0c8a0e2deec1cabf7e6e

  • SHA256

    8ff2018d19993b8fd38edc27d6471878eea748b3e98018bf4f9e8d5f5387ad00

  • SHA512

    5e73ec8b4ef5d9e015245dc0a32a1bb6420af6e649db970c0ad61522cb33879ae028c304995a1a51b375d695eb873ac3f74bdf0336558cc37ca06137cb7625b5

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxud:b/yC4GyNM01GuQMNXw2PSjHPbSuYlw

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-01-18_b8a58041a9532abad7d7a791d2392eab_cryptolocker

    • Size

      37KB

    • MD5

      b8a58041a9532abad7d7a791d2392eab

    • SHA1

      1b364a95688a0263610c0c8a0e2deec1cabf7e6e

    • SHA256

      8ff2018d19993b8fd38edc27d6471878eea748b3e98018bf4f9e8d5f5387ad00

    • SHA512

      5e73ec8b4ef5d9e015245dc0a32a1bb6420af6e649db970c0ad61522cb33879ae028c304995a1a51b375d695eb873ac3f74bdf0336558cc37ca06137cb7625b5

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxud:b/yC4GyNM01GuQMNXw2PSjHPbSuYlw

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks