Overview

overview

10

Static

static

10

2024-04-19...er.exe

windows7-x64

9

2024-04-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-19_03ac043d0daa2d602977e0d84d809f5a_cryptolocker

  • Size

    42KB

  • Sample

    240419-h7139sbg74

  • MD5

    03ac043d0daa2d602977e0d84d809f5a

  • SHA1

    b3f3a3fdbc409bf28438b999a0f376a8092b95a8

  • SHA256

    23cf6b93a42fbe9ca02e0753f8e4e31490e39e788ce9d6417b1c400be78c684e

  • SHA512

    521f0dd4064f23a1e66a7ddf1d39e603ffb2bce3151bdeefc09b3756295a22606e53a6a6adaf110405fe7136ab4d5cf8137c675614c14cbba8599b56833a7dbb

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA/:b/pYayGig5HjS3NPA/

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-04-19_03ac043d0daa2d602977e0d84d809f5a_cryptolocker

    • Size

      42KB

    • MD5

      03ac043d0daa2d602977e0d84d809f5a

    • SHA1

      b3f3a3fdbc409bf28438b999a0f376a8092b95a8

    • SHA256

      23cf6b93a42fbe9ca02e0753f8e4e31490e39e788ce9d6417b1c400be78c684e

    • SHA512

      521f0dd4064f23a1e66a7ddf1d39e603ffb2bce3151bdeefc09b3756295a22606e53a6a6adaf110405fe7136ab4d5cf8137c675614c14cbba8599b56833a7dbb

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA/:b/pYayGig5HjS3NPA/

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks