54374166e7e114974176cba2c33973ef1bbea829a405bdba07aee5dedf0420ca | Triage

Sharing

General

Target

2024-08-29_a36d9449b4f9fd54e59bd6e364dbd49b_cryptolocker
Size

47KB
Sample

240829-j7bn2s1enc
MD5

a36d9449b4f9fd54e59bd6e364dbd49b
SHA1

e1deb1bb844b1f1d74f9c4b982e4c207d1cca83b
SHA256

54374166e7e114974176cba2c33973ef1bbea829a405bdba07aee5dedf0420ca
SHA512

df6658b87dd3bc59de7d2efbaa5bc582acc512275d3716528c8c0fd1ddb4026a2de8da737f4546d0721d7d60e1a2aafce3128880e093012bb2ea7238fe08b23e
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr2:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwzy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-29_a36d9449b4f9fd54e59bd6e364dbd49b_cryptolocker
- Size
  
  47KB
- MD5
  
  a36d9449b4f9fd54e59bd6e364dbd49b
- SHA1
  
  e1deb1bb844b1f1d74f9c4b982e4c207d1cca83b
- SHA256
  
  54374166e7e114974176cba2c33973ef1bbea829a405bdba07aee5dedf0420ca
- SHA512
  
  df6658b87dd3bc59de7d2efbaa5bc582acc512275d3716528c8c0fd1ddb4026a2de8da737f4546d0721d7d60e1a2aafce3128880e093012bb2ea7238fe08b23e
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr2:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwzy
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2