0814c78b42e20c577e69e90b183e4428fd72261e4ddfedc8b48d88bd3be29fc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-02_451d148898a869c9c82b6baae8e610c9_cryptolocker
Size

46KB
Sample

240902-e3hjks1gjr
MD5

451d148898a869c9c82b6baae8e610c9
SHA1

517e735f91cf36fb3ed5562a581e9c2ac2041115
SHA256

0814c78b42e20c577e69e90b183e4428fd72261e4ddfedc8b48d88bd3be29fc6
SHA512

55b7b3390dda55adafcd42bc7421e90ce07e563953be1cdded0aafe18156ee5010d7ac5bb3053f94f767393d679019a1747dbb934df4cc39fbade154359ab70c
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUknqh:bm74zYcgT/EkM0ryfjdnqh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-02_451d148898a869c9c82b6baae8e610c9_cryptolocker
- Size
  
  46KB
- MD5
  
  451d148898a869c9c82b6baae8e610c9
- SHA1
  
  517e735f91cf36fb3ed5562a581e9c2ac2041115
- SHA256
  
  0814c78b42e20c577e69e90b183e4428fd72261e4ddfedc8b48d88bd3be29fc6
- SHA512
  
  55b7b3390dda55adafcd42bc7421e90ce07e563953be1cdded0aafe18156ee5010d7ac5bb3053f94f767393d679019a1747dbb934df4cc39fbade154359ab70c
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUknqh:bm74zYcgT/EkM0ryfjdnqh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2