eccc82de0b4cb95bc661aeea4a8b65022a1a6ceaafb1aa3a0d234254bff58b00 | Triage

Sharing

General

Target

2024-09-02_9ebf89254bc576965179fa25b9891a9e_cryptolocker
Size

44KB
Sample

240902-rbh29a1hnq
MD5

9ebf89254bc576965179fa25b9891a9e
SHA1

342915bd1843b7a7cba833722eba7d3516131284
SHA256

eccc82de0b4cb95bc661aeea4a8b65022a1a6ceaafb1aa3a0d234254bff58b00
SHA512

9749a8e2edaf94916d675279034c7172d45054f9fa4e28dd52beae94f876d003afd6e87f265d7219227e86dfd7f7b8e7df21325434ea2bc1834b79e03d67e451
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TS:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-02_9ebf89254bc576965179fa25b9891a9e_cryptolocker
- Size
  
  44KB
- MD5
  
  9ebf89254bc576965179fa25b9891a9e
- SHA1
  
  342915bd1843b7a7cba833722eba7d3516131284
- SHA256
  
  eccc82de0b4cb95bc661aeea4a8b65022a1a6ceaafb1aa3a0d234254bff58b00
- SHA512
  
  9749a8e2edaf94916d675279034c7172d45054f9fa4e28dd52beae94f876d003afd6e87f265d7219227e86dfd7f7b8e7df21325434ea2bc1834b79e03d67e451
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TS:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLS
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2