Overview

overview

10

Static

static

10

2024-01-23...er.exe

windows7-x64

9

2024-01-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-23_75e39820a6c7fea51c43835bcf89690e_cryptolocker

  • Size

    32KB

  • Sample

    240123-jhh2tsgebm

  • MD5

    75e39820a6c7fea51c43835bcf89690e

  • SHA1

    96a7cdb6950aee44c0999d031ba11ac689a8f510

  • SHA256

    b7c3c14ef41f70b6450214d85d60caf2d9700883d13c20f95c131d3738fd258b

  • SHA512

    14a4689bb98a7c44348054bce807e6d0e7fc4293e0329a948c58d61c9ebc141dab00b5e84e02308f3fdc47e7bfa2581625325d4e3a344ded3b3afb210521c109

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02lOQAu:b/yC4GyNM01GuQMNXw2PSjHC02ltAu

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-01-23_75e39820a6c7fea51c43835bcf89690e_cryptolocker

    • Size

      32KB

    • MD5

      75e39820a6c7fea51c43835bcf89690e

    • SHA1

      96a7cdb6950aee44c0999d031ba11ac689a8f510

    • SHA256

      b7c3c14ef41f70b6450214d85d60caf2d9700883d13c20f95c131d3738fd258b

    • SHA512

      14a4689bb98a7c44348054bce807e6d0e7fc4293e0329a948c58d61c9ebc141dab00b5e84e02308f3fdc47e7bfa2581625325d4e3a344ded3b3afb210521c109

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02lOQAu:b/yC4GyNM01GuQMNXw2PSjHC02ltAu

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks