61c573f2cdcf8e5a2734408407559746774d5950e2ef874a38ba022d65d67bf5 | Triage

Sharing

General

Target

2024-01-08_4dbfb24ec6b9576ca1e5668e4c0619fe_cryptolocker
Size

36KB
Sample

240109-hfeqyscecm
MD5

4dbfb24ec6b9576ca1e5668e4c0619fe
SHA1

7b8389f21d821e184736e5e8d43ad1d0b846c30f
SHA256

61c573f2cdcf8e5a2734408407559746774d5950e2ef874a38ba022d65d67bf5
SHA512

e7af818e7b87f56eed3cf0a3b73d08211e2554cf2b52fd0d415befb029ecac3c6d452b4a6817d1c71ed48234654cda471d9a7b2cbfc85f13dcc8eb1c44271988
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlb:b/yC4GyNM01GuQMNXw2PSjHPbSuYlb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-01-08_4dbfb24ec6b9576ca1e5668e4c0619fe_cryptolocker
- Size
  
  36KB
- MD5
  
  4dbfb24ec6b9576ca1e5668e4c0619fe
- SHA1
  
  7b8389f21d821e184736e5e8d43ad1d0b846c30f
- SHA256
  
  61c573f2cdcf8e5a2734408407559746774d5950e2ef874a38ba022d65d67bf5
- SHA512
  
  e7af818e7b87f56eed3cf0a3b73d08211e2554cf2b52fd0d415befb029ecac3c6d452b4a6817d1c71ed48234654cda471d9a7b2cbfc85f13dcc8eb1c44271988
- SSDEEP
  
  384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlb:b/yC4GyNM01GuQMNXw2PSjHPbSuYlb
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2