Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_6751050b3e1d44e7c8e5c5c79844600b_cryptolocker

  • Size

    31KB

  • Sample

    240522-1l3zvahh5x

  • MD5

    6751050b3e1d44e7c8e5c5c79844600b

  • SHA1

    0edad1287ad5900303906cdcf71a64c32512bee2

  • SHA256

    d9f5092f684f848d0f8563bb83426f8942c0613cc861828c55154f16c66e7241

  • SHA512

    3e4716057574df3ac2bb17845177319a2c40765c0bd13b113c1762c6413bf681323c4a20e6d3764f3dbcdeeb40fd6ef40b0fc102deb07688933b013b741f22cf

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+U8Ss87vhz:b/yC4GyNM01GuQMNXum+NSnz

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-05-22_6751050b3e1d44e7c8e5c5c79844600b_cryptolocker

    • Size

      31KB

    • MD5

      6751050b3e1d44e7c8e5c5c79844600b

    • SHA1

      0edad1287ad5900303906cdcf71a64c32512bee2

    • SHA256

      d9f5092f684f848d0f8563bb83426f8942c0613cc861828c55154f16c66e7241

    • SHA512

      3e4716057574df3ac2bb17845177319a2c40765c0bd13b113c1762c6413bf681323c4a20e6d3764f3dbcdeeb40fd6ef40b0fc102deb07688933b013b741f22cf

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+U8Ss87vhz:b/yC4GyNM01GuQMNXum+NSnz

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks