Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-25_8c6af9cc4670d1d1eb049d64e092e437_cryptolocker

  • Size

    40KB

  • Sample

    240125-hb9ersagar

  • MD5

    8c6af9cc4670d1d1eb049d64e092e437

  • SHA1

    54c0c69c707bf90b3dce4be09a90144d191f4c7e

  • SHA256

    79a3e54f5dd4cf3814037d810775012d4e7deac901dceaf73326a4ccdf791ca9

  • SHA512

    528e71c2137e1b2eff8cd61206883d0878b2a41334add97a437405b399902ed2ceb8f05bd56ab5d6f985bbdc6c62e22ec400406a73719bb0ce81a25b5c85653e

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAF:b/pYayGig5HjS3NPAF

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-01-25_8c6af9cc4670d1d1eb049d64e092e437_cryptolocker

    • Size

      40KB

    • MD5

      8c6af9cc4670d1d1eb049d64e092e437

    • SHA1

      54c0c69c707bf90b3dce4be09a90144d191f4c7e

    • SHA256

      79a3e54f5dd4cf3814037d810775012d4e7deac901dceaf73326a4ccdf791ca9

    • SHA512

      528e71c2137e1b2eff8cd61206883d0878b2a41334add97a437405b399902ed2ceb8f05bd56ab5d6f985bbdc6c62e22ec400406a73719bb0ce81a25b5c85653e

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAF:b/pYayGig5HjS3NPAF

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks