530a995c82d9b94eeedac82bd89cc51538519a8a3fad77b231c0e21845376c41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-17_4580b792a728e94da7915ceace7da6f3_cryptolocker
Size

67KB
Sample

240817-echfwsydrp
MD5

4580b792a728e94da7915ceace7da6f3
SHA1

b016ca3697083869dacc4c92a8f010702c1e0822
SHA256

530a995c82d9b94eeedac82bd89cc51538519a8a3fad77b231c0e21845376c41
SHA512

dc4bbf559de7307cbcce79805725dcdeea1d294a4d923cce076aaf136d448cd0c53f57f7df8ee11ef2d4ad59484d0af62554d85434873605a5a746d9a8f145e3
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293We:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-17_4580b792a728e94da7915ceace7da6f3_cryptolocker
- Size
  
  67KB
- MD5
  
  4580b792a728e94da7915ceace7da6f3
- SHA1
  
  b016ca3697083869dacc4c92a8f010702c1e0822
- SHA256
  
  530a995c82d9b94eeedac82bd89cc51538519a8a3fad77b231c0e21845376c41
- SHA512
  
  dc4bbf559de7307cbcce79805725dcdeea1d294a4d923cce076aaf136d448cd0c53f57f7df8ee11ef2d4ad59484d0af62554d85434873605a5a746d9a8f145e3
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293We:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7N
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2