826f35691c5887449898c5d47e667a1fb6f9d1a8fb7cd5829c31b4845707e404 | Triage

Sharing

General

Target

2024-08-07_f5345f046c99ca7062d35ab39358c268_cryptolocker
Size

30KB
Sample

240807-dw3eqszcpp
MD5

f5345f046c99ca7062d35ab39358c268
SHA1

8ed11a108985fe72d2eb0e492221c213c2155aaf
SHA256

826f35691c5887449898c5d47e667a1fb6f9d1a8fb7cd5829c31b4845707e404
SHA512

2bdeda243ab9b64011c80d4076acccdc2b2273a700ec4d92cab260e01c462d6f9df5f4edce34cbff3ab2c38c84e049dce3cbb7d1fcf5b03b429c38dfdc8d9b07
SSDEEP

384:v0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26Rsn1rCcOQtOOtEvwDpjqIGRS/Vb9h7:vQz7yVEhs9+js1SQtOOtEvwDpjz9+an

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-07_f5345f046c99ca7062d35ab39358c268_cryptolocker
- Size
  
  30KB
- MD5
  
  f5345f046c99ca7062d35ab39358c268
- SHA1
  
  8ed11a108985fe72d2eb0e492221c213c2155aaf
- SHA256
  
  826f35691c5887449898c5d47e667a1fb6f9d1a8fb7cd5829c31b4845707e404
- SHA512
  
  2bdeda243ab9b64011c80d4076acccdc2b2273a700ec4d92cab260e01c462d6f9df5f4edce34cbff3ab2c38c84e049dce3cbb7d1fcf5b03b429c38dfdc8d9b07
- SSDEEP
  
  384:v0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26Rsn1rCcOQtOOtEvwDpjqIGRS/Vb9h7:vQz7yVEhs9+js1SQtOOtEvwDpjz9+an
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2