a8bf0e098be4bd81dd533919fde5b669d0415b24fb05f4d0146fa8887f83abcb | Triage

Sharing

General

Target

2024-08-29_12541b7fdc86e53608565cb0895e8dcc_cryptolocker
Size

44KB
Sample

240829-klp5zsscph
MD5

12541b7fdc86e53608565cb0895e8dcc
SHA1

b740ee5de2c43e7cfdfb9b5d20fd8263caccd93a
SHA256

a8bf0e098be4bd81dd533919fde5b669d0415b24fb05f4d0146fa8887f83abcb
SHA512

9f1417f03f09ece26c15d4bd66b2ad86dee7b1a6bd2167c3fe97dfb4f0719e34923f6b4812f231e0d22636efecfb12282e92689a1231e5211a188924725eb778
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WJh:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-29_12541b7fdc86e53608565cb0895e8dcc_cryptolocker
- Size
  
  44KB
- MD5
  
  12541b7fdc86e53608565cb0895e8dcc
- SHA1
  
  b740ee5de2c43e7cfdfb9b5d20fd8263caccd93a
- SHA256
  
  a8bf0e098be4bd81dd533919fde5b669d0415b24fb05f4d0146fa8887f83abcb
- SHA512
  
  9f1417f03f09ece26c15d4bd66b2ad86dee7b1a6bd2167c3fe97dfb4f0719e34923f6b4812f231e0d22636efecfb12282e92689a1231e5211a188924725eb778
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WJh:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFE
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2