Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-25_c406822d92e9c21916768d549b7ff903_cryptolocker

  • Size

    40KB

  • Sample

    240125-gb7eqshhbq

  • MD5

    c406822d92e9c21916768d549b7ff903

  • SHA1

    5110eaa5f7f57086dff1684240225c4c9b217854

  • SHA256

    89990f7feaae034096e7cf88b4f48bfd2960f550f81cbba5199fd094aa65b9de

  • SHA512

    6946fd0492b3fc53845200473aac641840bf47e4a572022fa0213952ae8c476b32c5f577d5e007c511e9a69929d7b8bf97f048c81a2f1932cc6d21a6fbe43079

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAD:b/pYayGig5HjS3NPAD

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-01-25_c406822d92e9c21916768d549b7ff903_cryptolocker

    • Size

      40KB

    • MD5

      c406822d92e9c21916768d549b7ff903

    • SHA1

      5110eaa5f7f57086dff1684240225c4c9b217854

    • SHA256

      89990f7feaae034096e7cf88b4f48bfd2960f550f81cbba5199fd094aa65b9de

    • SHA512

      6946fd0492b3fc53845200473aac641840bf47e4a572022fa0213952ae8c476b32c5f577d5e007c511e9a69929d7b8bf97f048c81a2f1932cc6d21a6fbe43079

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAD:b/pYayGig5HjS3NPAD

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks