Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-22_32cc11feb7cd542d89b21b817e769018_cryptolocker

  • Size

    37KB

  • Sample

    240222-tzhshacg94

  • MD5

    32cc11feb7cd542d89b21b817e769018

  • SHA1

    0fde273628cae526c437eec2fe5bc39baeb0fe04

  • SHA256

    337e9c176c9d8f0ddb2becea68abc71d7661a538149fb99c4ed719fba74734c4

  • SHA512

    5ef626c5cf5f31646ef3eba65a691463d28c230f047c4e92e8258dc11754bc62898a219f78cdcb4e1a642680cc633ee37c716a497d5b6f4cb37f77d781038a1a

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuVuAv:b/yC4GyNM01GuQMNXw2PSjHPbSud

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-02-22_32cc11feb7cd542d89b21b817e769018_cryptolocker

    • Size

      37KB

    • MD5

      32cc11feb7cd542d89b21b817e769018

    • SHA1

      0fde273628cae526c437eec2fe5bc39baeb0fe04

    • SHA256

      337e9c176c9d8f0ddb2becea68abc71d7661a538149fb99c4ed719fba74734c4

    • SHA512

      5ef626c5cf5f31646ef3eba65a691463d28c230f047c4e92e8258dc11754bc62898a219f78cdcb4e1a642680cc633ee37c716a497d5b6f4cb37f77d781038a1a

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuVuAv:b/yC4GyNM01GuQMNXw2PSjHPbSud

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks