5e23155cdc4e15c5e8801c490a4fcf7c323bfdedf8640a7e49f52b15e14acd35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-29_3c0a56708bd8433a27c7ee98d2bb3eac_cryptolocker
Size

73KB
Sample

240829-jszgkasgjj
MD5

3c0a56708bd8433a27c7ee98d2bb3eac
SHA1

939f266a5cfb462c98f2441db9d51b6674e35857
SHA256

5e23155cdc4e15c5e8801c490a4fcf7c323bfdedf8640a7e49f52b15e14acd35
SHA512

4ff47b26b8036c71ce7e46d63e0d925019401d27482221eb30fcf64998c46aeb5866caebc0440dd7e8307b1350f973bc4f478f9ecd279843f1cbe54eea758aa0
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rn:vj+jsMQMOtEvwDpj5HZYTjipvF24P

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-29_3c0a56708bd8433a27c7ee98d2bb3eac_cryptolocker
- Size
  
  73KB
- MD5
  
  3c0a56708bd8433a27c7ee98d2bb3eac
- SHA1
  
  939f266a5cfb462c98f2441db9d51b6674e35857
- SHA256
  
  5e23155cdc4e15c5e8801c490a4fcf7c323bfdedf8640a7e49f52b15e14acd35
- SHA512
  
  4ff47b26b8036c71ce7e46d63e0d925019401d27482221eb30fcf64998c46aeb5866caebc0440dd7e8307b1350f973bc4f478f9ecd279843f1cbe54eea758aa0
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rn:vj+jsMQMOtEvwDpj5HZYTjipvF24P
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2