954df3fd1766b282534144a0d55706af9c6da350cec7c80e34cf2dff6e16902a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-27_23bfb8a15e889e0917e7718b6fe41c46_cryptolocker
Size

44KB
Sample

240727-kbg2mazckg
MD5

23bfb8a15e889e0917e7718b6fe41c46
SHA1

b831efafd5f3987d6644dc199f02f78cf2c46ba3
SHA256

954df3fd1766b282534144a0d55706af9c6da350cec7c80e34cf2dff6e16902a
SHA512

80353f177e905e2939551077523d4571e28286a0dfba3bb9b2ff8d00f361925c74be2cbd78c3452ab34242c96cb4d570a9c1961bcef78af3fde2555d8198848a
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TlDm:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-27_23bfb8a15e889e0917e7718b6fe41c46_cryptolocker
- Size
  
  44KB
- MD5
  
  23bfb8a15e889e0917e7718b6fe41c46
- SHA1
  
  b831efafd5f3987d6644dc199f02f78cf2c46ba3
- SHA256
  
  954df3fd1766b282534144a0d55706af9c6da350cec7c80e34cf2dff6e16902a
- SHA512
  
  80353f177e905e2939551077523d4571e28286a0dfba3bb9b2ff8d00f361925c74be2cbd78c3452ab34242c96cb4d570a9c1961bcef78af3fde2555d8198848a
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TlDm:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLE
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2