f01fa65dbfe1c1df5e25f23bda20865373490aeea982270a733917590fd5ae72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-04_4acc2ac01372e78496745d298414cd6f_cryptolocker
Size

53KB
Sample

240904-kmhsasycpg
MD5

4acc2ac01372e78496745d298414cd6f
SHA1

347db7405190c588a134e38eb4687d7a1daa5738
SHA256

f01fa65dbfe1c1df5e25f23bda20865373490aeea982270a733917590fd5ae72
SHA512

842d4d75e3ceb8e5b204a2b79ddcd40d56b8674ba731e3666f473349ff95cde3581e0d167762e581925633776db3412b2c5d33cc3e7ff9657c73e76a4b4f9f12
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAI4kjm3:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7X

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-04_4acc2ac01372e78496745d298414cd6f_cryptolocker
- Size
  
  53KB
- MD5
  
  4acc2ac01372e78496745d298414cd6f
- SHA1
  
  347db7405190c588a134e38eb4687d7a1daa5738
- SHA256
  
  f01fa65dbfe1c1df5e25f23bda20865373490aeea982270a733917590fd5ae72
- SHA512
  
  842d4d75e3ceb8e5b204a2b79ddcd40d56b8674ba731e3666f473349ff95cde3581e0d167762e581925633776db3412b2c5d33cc3e7ff9657c73e76a4b4f9f12
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAI4kjm3:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7X
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2