c522b455bba6619b6d62d22de2cb014e564560d56b316168f8d1f4e7eba173df | Triage

Sharing

General

Target

2024-08-26_8b42a90743b40f4938232ecbffa90772_cryptolocker
Size

48KB
Sample

240826-hnt6ls1aqg
MD5

8b42a90743b40f4938232ecbffa90772
SHA1

a3230e3656fa96308eb8dea2e627b4da73287e06
SHA256

c522b455bba6619b6d62d22de2cb014e564560d56b316168f8d1f4e7eba173df
SHA512

3e086113b9d87fa491771288f486afac1153fce7a5a7bf671f6d2039343d0b952687d29fff8f0acb2ab77f935a03d1865c247a46c9554cc2b229a5c81560dede
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITW:26Q0ElP6G+gBQMOtEvwDpjgWMl7TW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-26_8b42a90743b40f4938232ecbffa90772_cryptolocker
- Size
  
  48KB
- MD5
  
  8b42a90743b40f4938232ecbffa90772
- SHA1
  
  a3230e3656fa96308eb8dea2e627b4da73287e06
- SHA256
  
  c522b455bba6619b6d62d22de2cb014e564560d56b316168f8d1f4e7eba173df
- SHA512
  
  3e086113b9d87fa491771288f486afac1153fce7a5a7bf671f6d2039343d0b952687d29fff8f0acb2ab77f935a03d1865c247a46c9554cc2b229a5c81560dede
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITW:26Q0ElP6G+gBQMOtEvwDpjgWMl7TW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2