849a048aa89a958ccdd9a6acc5edf9f27c1cdba04503252237af53021976ff51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-03_8fb1274f229c7ff3670583da9efd5cc7_cryptolocker
Size

72KB
Sample

240903-g5cgfs1bnd
MD5

8fb1274f229c7ff3670583da9efd5cc7
SHA1

7d3bd7e8feced2e0cec5d6aa657f1b0f01b19cca
SHA256

849a048aa89a958ccdd9a6acc5edf9f27c1cdba04503252237af53021976ff51
SHA512

bd13c29dce8728c8e5c3e1122167e2382dd914a85132971fb9b81f9448622bfdd9046d8aadfe2ce0979aa57ac00636e3f0ce0701d9ddce6f1104fbfbfca3a94d
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rd:vj+jsMQMOtEvwDpj5HZYTjipvF24V

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-03_8fb1274f229c7ff3670583da9efd5cc7_cryptolocker
- Size
  
  72KB
- MD5
  
  8fb1274f229c7ff3670583da9efd5cc7
- SHA1
  
  7d3bd7e8feced2e0cec5d6aa657f1b0f01b19cca
- SHA256
  
  849a048aa89a958ccdd9a6acc5edf9f27c1cdba04503252237af53021976ff51
- SHA512
  
  bd13c29dce8728c8e5c3e1122167e2382dd914a85132971fb9b81f9448622bfdd9046d8aadfe2ce0979aa57ac00636e3f0ce0701d9ddce6f1104fbfbfca3a94d
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Rd:vj+jsMQMOtEvwDpj5HZYTjipvF24V
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2