727e10557f9935d9ebd720befc7b3ce2ae0a8fc1a093639062d2120edf063831 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-09_5b513a3dee8fc2379ba495df3d6e4c0e_cryptolocker
Size

391KB
Sample

240809-xja99sthpk
MD5

5b513a3dee8fc2379ba495df3d6e4c0e
SHA1

76b40b48c4ffeecbe0a80e211eb0f2b521c5496b
SHA256

727e10557f9935d9ebd720befc7b3ce2ae0a8fc1a093639062d2120edf063831
SHA512

d4d726b122a3d589e32f8230a6bfe1b1b4b345be324cf9f60f1e503bc0a82cd51e15136db0a2dc413bf919338d44dbde876029b9cdf2f94e824a16fd1fa5f55b
SSDEEP

6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX0:nnOflT/ZFIjBz3xjTxynGUOUhX0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-09_5b513a3dee8fc2379ba495df3d6e4c0e_cryptolocker
- Size
  
  391KB
- MD5
  
  5b513a3dee8fc2379ba495df3d6e4c0e
- SHA1
  
  76b40b48c4ffeecbe0a80e211eb0f2b521c5496b
- SHA256
  
  727e10557f9935d9ebd720befc7b3ce2ae0a8fc1a093639062d2120edf063831
- SHA512
  
  d4d726b122a3d589e32f8230a6bfe1b1b4b345be324cf9f60f1e503bc0a82cd51e15136db0a2dc413bf919338d44dbde876029b9cdf2f94e824a16fd1fa5f55b
- SSDEEP
  
  6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzX0:nnOflT/ZFIjBz3xjTxynGUOUhX0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2