cf8d48a5fef7b1b6aff44d034abdffbb2279514e4713ea21e770884d572637a0 | Triage

Sharing

General

Target

2024-08-14_1b29d418f94135a555cf0778236fc994_cryptolocker
Size

78KB
Sample

240814-w2d87swgrd
MD5

1b29d418f94135a555cf0778236fc994
SHA1

940b301a1a6bb66b4480bb9a344aea46666ed623
SHA256

cf8d48a5fef7b1b6aff44d034abdffbb2279514e4713ea21e770884d572637a0
SHA512

c5a87536260ebdea72894a19dc92dba45bc00a7668d9ab2a6e7d84c98038187ed0e67f7f470e9809d2e37063efe6e4bafd09f7d38a299935a4fae4416a1df1f4
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siY+:X6a+SOtEvwDpjBZYvQd2t

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-14_1b29d418f94135a555cf0778236fc994_cryptolocker
- Size
  
  78KB
- MD5
  
  1b29d418f94135a555cf0778236fc994
- SHA1
  
  940b301a1a6bb66b4480bb9a344aea46666ed623
- SHA256
  
  cf8d48a5fef7b1b6aff44d034abdffbb2279514e4713ea21e770884d572637a0
- SHA512
  
  c5a87536260ebdea72894a19dc92dba45bc00a7668d9ab2a6e7d84c98038187ed0e67f7f470e9809d2e37063efe6e4bafd09f7d38a299935a4fae4416a1df1f4
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siY+:X6a+SOtEvwDpjBZYvQd2t
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2