04b697e3f2f7f4a6e0ed0b069ff8a56410a100f0090a23e777d890a65c7ed893 | Triage

Sharing

General

Target

2024-06-29_fe459af43e8c7f8a77381abdbd245f2a_cryptolocker
Size

43KB
Sample

240629-fnf8ms1fnb
MD5

fe459af43e8c7f8a77381abdbd245f2a
SHA1

9756f57a08a58a287c74b8bfa1038b0362b3ef94
SHA256

04b697e3f2f7f4a6e0ed0b069ff8a56410a100f0090a23e777d890a65c7ed893
SHA512

d7c36086ce9ca21c8eecbe506c28a8ca7640bbc42ca9f92c4bef4b9f774e49d2db4871bf223f4691cf2d3fdd87164087e8d01fb3c5c9e8ab7d2297799af9ceba
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrG:bCDOw9aMDooc+vAqjC

Score

7^/10

Malware Config

Targets

- Target
  
  2024-06-29_fe459af43e8c7f8a77381abdbd245f2a_cryptolocker
- Size
  
  43KB
- MD5
  
  fe459af43e8c7f8a77381abdbd245f2a
- SHA1
  
  9756f57a08a58a287c74b8bfa1038b0362b3ef94
- SHA256
  
  04b697e3f2f7f4a6e0ed0b069ff8a56410a100f0090a23e777d890a65c7ed893
- SHA512
  
  d7c36086ce9ca21c8eecbe506c28a8ca7640bbc42ca9f92c4bef4b9f774e49d2db4871bf223f4691cf2d3fdd87164087e8d01fb3c5c9e8ab7d2297799af9ceba
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrG:bCDOw9aMDooc+vAqjC
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2