4f15d8a23e4425ab555addf8bfadaad0ef9e768d8cd27b74efbc30923fd7962b | Triage

Sharing

General

Target

2024-08-29_8bb81d1818d04ffd54839a4658eef3be_cryptolocker
Size

29KB
Sample

240829-wqdhjatgle
MD5

8bb81d1818d04ffd54839a4658eef3be
SHA1

b0d733d56f3a0f34c56080ec47a6c36f1eb9188b
SHA256

4f15d8a23e4425ab555addf8bfadaad0ef9e768d8cd27b74efbc30923fd7962b
SHA512

3d8d8c899454ad26c3758e3fed38c4bfc5f2c2dc2b69148db042c0b09e1adf1ed97533326d6dc3df1af8effc875c9680556186b65ecba327064738c4a3e5b122
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGuZt:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-29_8bb81d1818d04ffd54839a4658eef3be_cryptolocker
- Size
  
  29KB
- MD5
  
  8bb81d1818d04ffd54839a4658eef3be
- SHA1
  
  b0d733d56f3a0f34c56080ec47a6c36f1eb9188b
- SHA256
  
  4f15d8a23e4425ab555addf8bfadaad0ef9e768d8cd27b74efbc30923fd7962b
- SHA512
  
  3d8d8c899454ad26c3758e3fed38c4bfc5f2c2dc2b69148db042c0b09e1adf1ed97533326d6dc3df1af8effc875c9680556186b65ecba327064738c4a3e5b122
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGuZt:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2