515c4c55a74bad91226f1828026963d0344f4af131c873ffa5febc2ca9c12c81 | Triage

Sharing

General

Target

2024-09-05_02bc95cb3353eca2a04194f2e90696e5_cryptolocker
Size

31KB
Sample

240905-m44gfazepd
MD5

02bc95cb3353eca2a04194f2e90696e5
SHA1

3a86a4d0e39fdf22a093bf238c6538e132f1dd82
SHA256

515c4c55a74bad91226f1828026963d0344f4af131c873ffa5febc2ca9c12c81
SHA512

6b95ee3ae919918d812647e0a11e128594d261997ae5fd1011d54942bbd26fc253e102238cec38f169fc2b8c5b0473d14cffb1bc2ad5ab7403771a26e1cd7f7b
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf0:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_02bc95cb3353eca2a04194f2e90696e5_cryptolocker
- Size
  
  31KB
- MD5
  
  02bc95cb3353eca2a04194f2e90696e5
- SHA1
  
  3a86a4d0e39fdf22a093bf238c6538e132f1dd82
- SHA256
  
  515c4c55a74bad91226f1828026963d0344f4af131c873ffa5febc2ca9c12c81
- SHA512
  
  6b95ee3ae919918d812647e0a11e128594d261997ae5fd1011d54942bbd26fc253e102238cec38f169fc2b8c5b0473d14cffb1bc2ad5ab7403771a26e1cd7f7b
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf0:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2