Overview

overview

10

Static

static

10

da489419de...de.exe

windows7-x64

9

da489419de...de.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    da489419deb4bcb2a01ea5cff66424f0c5d077380310bb32c8ef9010714118de

  • Size

    391KB

  • Sample

    240528-d99qzaef54

  • MD5

    3acaa579adb5b3ad4f6c825777c2f884

  • SHA1

    6aa0c9447908d25ae8c5e2a0c7ca446d41936346

  • SHA256

    da489419deb4bcb2a01ea5cff66424f0c5d077380310bb32c8ef9010714118de

  • SHA512

    c82bcb89a9dd0549e4320fe65e2eb3502ae9c428c524e58b554b5b1bd491c02b26d3dc29a34e1594f1afdc730b390b253905d9199e0b78694728a2a42245189a

  • SSDEEP

    6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX4:nnOflT/ZFIjBz3xjTxynGUOUhX4

Score
10/10

Malware Config

Targets

    • Target

      da489419deb4bcb2a01ea5cff66424f0c5d077380310bb32c8ef9010714118de

    • Size

      391KB

    • MD5

      3acaa579adb5b3ad4f6c825777c2f884

    • SHA1

      6aa0c9447908d25ae8c5e2a0c7ca446d41936346

    • SHA256

      da489419deb4bcb2a01ea5cff66424f0c5d077380310bb32c8ef9010714118de

    • SHA512

      c82bcb89a9dd0549e4320fe65e2eb3502ae9c428c524e58b554b5b1bd491c02b26d3dc29a34e1594f1afdc730b390b253905d9199e0b78694728a2a42245189a

    • SSDEEP

      6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX4:nnOflT/ZFIjBz3xjTxynGUOUhX4

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks