Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-04_e18c0f13baf360080de6c5a29fe7f89f_cryptolocker

  • Size

    41KB

  • Sample

    240204-mrg3nsfeb2

  • MD5

    e18c0f13baf360080de6c5a29fe7f89f

  • SHA1

    a88d47bfe27a6ff100e840fdb28ecc6fb5d5b44b

  • SHA256

    340c5d89adef60fec12ab8137d685a08c01efcdcfed0d0761b9d7da82ae0fc53

  • SHA512

    c75ded363353586849ee2b1a1dcfe1584dbb733e57e586b10c4261554728a4a40ecb594df6fbdffb0baafa50e1497cc98bb3e98d910656d9100034e78a1ba228

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAa/:b/pYayGig5HjS3NPAI

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-02-04_e18c0f13baf360080de6c5a29fe7f89f_cryptolocker

    • Size

      41KB

    • MD5

      e18c0f13baf360080de6c5a29fe7f89f

    • SHA1

      a88d47bfe27a6ff100e840fdb28ecc6fb5d5b44b

    • SHA256

      340c5d89adef60fec12ab8137d685a08c01efcdcfed0d0761b9d7da82ae0fc53

    • SHA512

      c75ded363353586849ee2b1a1dcfe1584dbb733e57e586b10c4261554728a4a40ecb594df6fbdffb0baafa50e1497cc98bb3e98d910656d9100034e78a1ba228

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAa/:b/pYayGig5HjS3NPAI

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks