Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_02eab072ed063619c99325392e9dae2a_cryptolocker

  • Size

    38KB

  • Sample

    240128-z77dqabhhm

  • MD5

    02eab072ed063619c99325392e9dae2a

  • SHA1

    f8d219b8abe3f127b8fc2548d21bbfe5f6a2dcb5

  • SHA256

    e2e41269722810e8b0f2f66f5987e726077c781d83f11ba3e9edfd671d118d80

  • SHA512

    980e3865bc69a6a5b175a8847ce6876e28d086e2d8ee53f603f98088ba06c7696a3526063720c8a4557c113eec32ac0a42097c84166fa225a2b1bf3f0acf8291

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxuQs6:b/yC4GyNM01GuQMNXw2PSjHPbSuYlM6

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-01-28_02eab072ed063619c99325392e9dae2a_cryptolocker

    • Size

      38KB

    • MD5

      02eab072ed063619c99325392e9dae2a

    • SHA1

      f8d219b8abe3f127b8fc2548d21bbfe5f6a2dcb5

    • SHA256

      e2e41269722810e8b0f2f66f5987e726077c781d83f11ba3e9edfd671d118d80

    • SHA512

      980e3865bc69a6a5b175a8847ce6876e28d086e2d8ee53f603f98088ba06c7696a3526063720c8a4557c113eec32ac0a42097c84166fa225a2b1bf3f0acf8291

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxuQs6:b/yC4GyNM01GuQMNXw2PSjHPbSuYlM6

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks