229bdca5ed7088cbb35b68f2fb852a1e40d7960da5e69751d30381c5920f65fd | Triage

Sharing

General

Target

2024-08-29_dae5f1fe31b7e255a810ffe34237312b_cryptolocker
Size

69KB
Sample

240829-jvg1aszhpg
MD5

dae5f1fe31b7e255a810ffe34237312b
SHA1

c02f8e06bec75d823c82c49f6765e27e13ba6095
SHA256

229bdca5ed7088cbb35b68f2fb852a1e40d7960da5e69751d30381c5920f65fd
SHA512

879c2688c142a153649c10f298d4f132c8dc9aa510b932357f6446cb38cd4596fa283d6dae9893fdea5404057a736408e063ecc57cfc1b9d3969beb44d5d8f91
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UYK:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-29_dae5f1fe31b7e255a810ffe34237312b_cryptolocker
- Size
  
  69KB
- MD5
  
  dae5f1fe31b7e255a810ffe34237312b
- SHA1
  
  c02f8e06bec75d823c82c49f6765e27e13ba6095
- SHA256
  
  229bdca5ed7088cbb35b68f2fb852a1e40d7960da5e69751d30381c5920f65fd
- SHA512
  
  879c2688c142a153649c10f298d4f132c8dc9aa510b932357f6446cb38cd4596fa283d6dae9893fdea5404057a736408e063ecc57cfc1b9d3969beb44d5d8f91
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UYK:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7N
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2