152a5b98988eb611bb1e3d0db4fc81e57888ec6dcc67dbff5a6b2d2f403f05a1 | Triage

Sharing

General

Target

2024-08-17_5ea20a0ac1ae2c71e303d5261e6e85cc_cryptolocker
Size

69KB
Sample

240817-hr14bswdlq
MD5

5ea20a0ac1ae2c71e303d5261e6e85cc
SHA1

1a48ee7495a5cd1c27c95a319d195b006381e5a1
SHA256

152a5b98988eb611bb1e3d0db4fc81e57888ec6dcc67dbff5a6b2d2f403f05a1
SHA512

7514b9a06381be7f1f6f290ab09ffd5846fe51c7bffbc608681bd6ec411060c411ea7402e36ce66f0e200eed61fb559c8d63363d88a6a458ecefbab2c70e1779
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UYY:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-17_5ea20a0ac1ae2c71e303d5261e6e85cc_cryptolocker
- Size
  
  69KB
- MD5
  
  5ea20a0ac1ae2c71e303d5261e6e85cc
- SHA1
  
  1a48ee7495a5cd1c27c95a319d195b006381e5a1
- SHA256
  
  152a5b98988eb611bb1e3d0db4fc81e57888ec6dcc67dbff5a6b2d2f403f05a1
- SHA512
  
  7514b9a06381be7f1f6f290ab09ffd5846fe51c7bffbc608681bd6ec411060c411ea7402e36ce66f0e200eed61fb559c8d63363d88a6a458ecefbab2c70e1779
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UYY:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2