4bdf267dcc44dbfe2da846dee4e85da773f2dee878e0d11935788f865910e7b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-05_601029a118eb72fc2e41bf032adf3f67_cryptolocker
Size

56KB
Sample

240905-m6cfqsyhlr
MD5

601029a118eb72fc2e41bf032adf3f67
SHA1

11094629a634c09ad4995637e79f3d1280476439
SHA256

4bdf267dcc44dbfe2da846dee4e85da773f2dee878e0d11935788f865910e7b1
SHA512

84a1799f847f45d52bdd330f7ba8986c216b65ffd059204f08a721f2a713ec1505c41605742aa23dfee98c310aea0206d0c6d775a40b5f898458022b62a9e467
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EgEB:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_601029a118eb72fc2e41bf032adf3f67_cryptolocker
- Size
  
  56KB
- MD5
  
  601029a118eb72fc2e41bf032adf3f67
- SHA1
  
  11094629a634c09ad4995637e79f3d1280476439
- SHA256
  
  4bdf267dcc44dbfe2da846dee4e85da773f2dee878e0d11935788f865910e7b1
- SHA512
  
  84a1799f847f45d52bdd330f7ba8986c216b65ffd059204f08a721f2a713ec1505c41605742aa23dfee98c310aea0206d0c6d775a40b5f898458022b62a9e467
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EgEB:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2