Overview

overview

10

Static

static

10

2024-05-14...er.exe

windows7-x64

9

2024-05-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-14_db9ac8ff33832978b742904588cf0e54_cryptolocker

  • Size

    41KB

  • Sample

    240514-3glwwadg9s

  • MD5

    db9ac8ff33832978b742904588cf0e54

  • SHA1

    7c4b350729cde2fa8e53e215dda095c508e74ca3

  • SHA256

    7f0799ef8791d3b76e85a7427a9eaef61e67152446fddc266c3956c2e8b34c6b

  • SHA512

    6a7673e19c72072a2466d386163eeb762a81ac731fa99347f11cb9b343e2a4858df139aadcbb8999f6ba1f8470e45fb8a43b3ca069bf0330ae9dabcecb223412

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uyn:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZY

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-05-14_db9ac8ff33832978b742904588cf0e54_cryptolocker

    • Size

      41KB

    • MD5

      db9ac8ff33832978b742904588cf0e54

    • SHA1

      7c4b350729cde2fa8e53e215dda095c508e74ca3

    • SHA256

      7f0799ef8791d3b76e85a7427a9eaef61e67152446fddc266c3956c2e8b34c6b

    • SHA512

      6a7673e19c72072a2466d386163eeb762a81ac731fa99347f11cb9b343e2a4858df139aadcbb8999f6ba1f8470e45fb8a43b3ca069bf0330ae9dabcecb223412

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uyn:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZY

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks