22f331b38e35d30be7501ddda4d0dc61dfe1924c0e87a4f7dced2af78bdbd977 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-04_7a650d4d538112dae25477a7b1c1ccd4_cryptolocker
Size

41KB
Sample

240904-plsy4a1elg
MD5

7a650d4d538112dae25477a7b1c1ccd4
SHA1

db066a99d18ae84976b880e12669f72425ed51fd
SHA256

22f331b38e35d30be7501ddda4d0dc61dfe1924c0e87a4f7dced2af78bdbd977
SHA512

897efd39332cdcfa3c0daf21614b588cc8aa8f1f8bee2a85c72381235312cc046c29d21f76abfeef544ea0e590adced8787d3539c641ffb0e434942b6a349121
SSDEEP

768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqZM5:bxNrC7kYo1Fxf3s05rwxbFn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-04_7a650d4d538112dae25477a7b1c1ccd4_cryptolocker
- Size
  
  41KB
- MD5
  
  7a650d4d538112dae25477a7b1c1ccd4
- SHA1
  
  db066a99d18ae84976b880e12669f72425ed51fd
- SHA256
  
  22f331b38e35d30be7501ddda4d0dc61dfe1924c0e87a4f7dced2af78bdbd977
- SHA512
  
  897efd39332cdcfa3c0daf21614b588cc8aa8f1f8bee2a85c72381235312cc046c29d21f76abfeef544ea0e590adced8787d3539c641ffb0e434942b6a349121
- SSDEEP
  
  768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqZM5:bxNrC7kYo1Fxf3s05rwxbFn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2