Overview

overview

10

Static

static

10

c9d7a86666...cb.exe

windows7-x64

9

c9d7a86666...cb.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9d7a866663a11577da74ad49edc9096b9c16c1ed69c2f31337a7d673899e9cb

  • Size

    39KB

  • Sample

    240417-ew9dqade73

  • MD5

    9158d52251c2b1a08fed2da31a527cc7

  • SHA1

    a5568cd34e3b6481f653cb0b61b4b24ecd90bc83

  • SHA256

    c9d7a866663a11577da74ad49edc9096b9c16c1ed69c2f31337a7d673899e9cb

  • SHA512

    0b04bccfd8ede856758f0d417d2ee41693a676db91a233c78f91d0e09ff1a601e373bfa88d825628cd282213c050b0777e4f649a3e4a6022424cad26ecd02ecc

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLp7P:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL1

Score
10/10

Malware Config

Targets

    • Target

      c9d7a866663a11577da74ad49edc9096b9c16c1ed69c2f31337a7d673899e9cb

    • Size

      39KB

    • MD5

      9158d52251c2b1a08fed2da31a527cc7

    • SHA1

      a5568cd34e3b6481f653cb0b61b4b24ecd90bc83

    • SHA256

      c9d7a866663a11577da74ad49edc9096b9c16c1ed69c2f31337a7d673899e9cb

    • SHA512

      0b04bccfd8ede856758f0d417d2ee41693a676db91a233c78f91d0e09ff1a601e373bfa88d825628cd282213c050b0777e4f649a3e4a6022424cad26ecd02ecc

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLp7P:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks