Overview

overview

10

Static

static

10

2024-04-22...er.exe

windows7-x64

9

2024-04-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-22_e7e1ea2d42173f3543e44e02591467cf_cryptolocker

  • Size

    36KB

  • Sample

    240422-k6bs4ahh8x

  • MD5

    e7e1ea2d42173f3543e44e02591467cf

  • SHA1

    8893becf7ba84941cf83d521f8aa8bb3651e5334

  • SHA256

    68e7c98d586bcf7691cca08fded3d603c82e70fc8f7778d65cdbe3419c5529d6

  • SHA512

    c352f5fb6496e048ae9a4707e0149eb79f01d8b2060e47938fc7c27d91cc0eec5c4944b3f6c6f4f88940b816720600c84582230cac821bc573b92852d0e08d02

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6A0X/EIjxu+pmdE:b/yC4GyNM01GuQMNXw2PSjH+PPxnpmdE

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-04-22_e7e1ea2d42173f3543e44e02591467cf_cryptolocker

    • Size

      36KB

    • MD5

      e7e1ea2d42173f3543e44e02591467cf

    • SHA1

      8893becf7ba84941cf83d521f8aa8bb3651e5334

    • SHA256

      68e7c98d586bcf7691cca08fded3d603c82e70fc8f7778d65cdbe3419c5529d6

    • SHA512

      c352f5fb6496e048ae9a4707e0149eb79f01d8b2060e47938fc7c27d91cc0eec5c4944b3f6c6f4f88940b816720600c84582230cac821bc573b92852d0e08d02

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6A0X/EIjxu+pmdE:b/yC4GyNM01GuQMNXw2PSjH+PPxnpmdE

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks