Overview

overview

10

Static

static

10

2024-05-23...er.exe

windows7-x64

9

2024-05-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_23183eaf9884b11a3e8416ab7a28c2fa_cryptolocker

  • Size

    44KB

  • Sample

    240523-cv9xraae2x

  • MD5

    23183eaf9884b11a3e8416ab7a28c2fa

  • SHA1

    664852f586c0678af380cd22dd88c5c8215cc3e6

  • SHA256

    e100fbde4e3b937cca58e4cb38bfe36153d5a2b36c6795cbe839184e792f73e9

  • SHA512

    6cc7ddba5d6df037f449472ce9aa4c6ebb9b15793b14baea1d6868453b51f1ed9d07dea2f32fd524e0e70b7b58f571d24748d24f236eb70702065e6bb39c9344

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAV:b/pYayGig5HjS3NPAV

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-05-23_23183eaf9884b11a3e8416ab7a28c2fa_cryptolocker

    • Size

      44KB

    • MD5

      23183eaf9884b11a3e8416ab7a28c2fa

    • SHA1

      664852f586c0678af380cd22dd88c5c8215cc3e6

    • SHA256

      e100fbde4e3b937cca58e4cb38bfe36153d5a2b36c6795cbe839184e792f73e9

    • SHA512

      6cc7ddba5d6df037f449472ce9aa4c6ebb9b15793b14baea1d6868453b51f1ed9d07dea2f32fd524e0e70b7b58f571d24748d24f236eb70702065e6bb39c9344

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAV:b/pYayGig5HjS3NPAV

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks