Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-03_643618d536023aeda7becdf330be95fa_cryptolocker

  • Size

    33KB

  • Sample

    240203-arldwacfd6

  • MD5

    643618d536023aeda7becdf330be95fa

  • SHA1

    8b18be168edc9048bf56cc5a9932a3f33d671b02

  • SHA256

    8e06c4639d4abebf7ce205fc69e91d0f951d479615ea9e3e81b72b63ad0b701d

  • SHA512

    0ae3c486c522270c08b15c58bea98b24dd74f0a2ef6e092b77c52c03a8e83830844d442e5f157a248ab55ba4aa1ca3429fd84d474a9b4338dac90571306c6d5c

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6A0X/EIjR:b/yC4GyNM01GuQMNXw2PSjH+PPR

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-02-03_643618d536023aeda7becdf330be95fa_cryptolocker

    • Size

      33KB

    • MD5

      643618d536023aeda7becdf330be95fa

    • SHA1

      8b18be168edc9048bf56cc5a9932a3f33d671b02

    • SHA256

      8e06c4639d4abebf7ce205fc69e91d0f951d479615ea9e3e81b72b63ad0b701d

    • SHA512

      0ae3c486c522270c08b15c58bea98b24dd74f0a2ef6e092b77c52c03a8e83830844d442e5f157a248ab55ba4aa1ca3429fd84d474a9b4338dac90571306c6d5c

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6A0X/EIjR:b/yC4GyNM01GuQMNXw2PSjH+PPR

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks