eb7344a4b05ec508100f6a92a1fd28f070fdc83254b96f2fa51bce366d945042 | Triage

Sharing

General

Target

2024-08-21_7ba8df13b516ddad9e4f188eb6477ce3_cryptolocker
Size

74KB
Sample

240821-mlh3saxcnm
MD5

7ba8df13b516ddad9e4f188eb6477ce3
SHA1

9d2ea20298df6a389c723407ddb0db4985bf7031
SHA256

eb7344a4b05ec508100f6a92a1fd28f070fdc83254b96f2fa51bce366d945042
SHA512

2f7147ad7f6dcc65a8d6151c6c6ec24688c1801a10fe25fa85f5f238600292fb03df4386a917265e79cd126b8ff4c9de1c64f3ceeef26983cee11e1e7b613829
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RT:vj+jsMQMOtEvwDpj5HZYTjipvF24pF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-21_7ba8df13b516ddad9e4f188eb6477ce3_cryptolocker
- Size
  
  74KB
- MD5
  
  7ba8df13b516ddad9e4f188eb6477ce3
- SHA1
  
  9d2ea20298df6a389c723407ddb0db4985bf7031
- SHA256
  
  eb7344a4b05ec508100f6a92a1fd28f070fdc83254b96f2fa51bce366d945042
- SHA512
  
  2f7147ad7f6dcc65a8d6151c6c6ec24688c1801a10fe25fa85f5f238600292fb03df4386a917265e79cd126b8ff4c9de1c64f3ceeef26983cee11e1e7b613829
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RT:vj+jsMQMOtEvwDpj5HZYTjipvF24pF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2