2c8999903e7859982d81a9f2ebae28179628a6ae1e5833feacabadfe3747893e | Triage

Sharing

General

Target

2024-08-29_12ea6a4177c3f26fc0475f30d2e88a71_cryptolocker
Size

42KB
Sample

240829-jmvanazfra
MD5

12ea6a4177c3f26fc0475f30d2e88a71
SHA1

b4fec9c66c66b19edeaf1619f9dd2ceb40ee3f46
SHA256

2c8999903e7859982d81a9f2ebae28179628a6ae1e5833feacabadfe3747893e
SHA512

b8d26888ad97366e1d8ef5ab710d743da47d7b76761c28fb26021eea0f21f1517fa36d4d5342f5fe5166bf16a252c2c7a8997942f6536555ed3ade090fbc0490
SSDEEP

768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCJ:bA6YcA/X6G0W143QC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-29_12ea6a4177c3f26fc0475f30d2e88a71_cryptolocker
- Size
  
  42KB
- MD5
  
  12ea6a4177c3f26fc0475f30d2e88a71
- SHA1
  
  b4fec9c66c66b19edeaf1619f9dd2ceb40ee3f46
- SHA256
  
  2c8999903e7859982d81a9f2ebae28179628a6ae1e5833feacabadfe3747893e
- SHA512
  
  b8d26888ad97366e1d8ef5ab710d743da47d7b76761c28fb26021eea0f21f1517fa36d4d5342f5fe5166bf16a252c2c7a8997942f6536555ed3ade090fbc0490
- SSDEEP
  
  768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCJ:bA6YcA/X6G0W143QC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2