fdefe3f5f8ceb7f3013f7b3317550efc7be22140b491b3c4dc8f57155d9d50f7 | Triage

Sharing

General

Target

2024-09-05_a1744115b9f52280899cc0d5aa6b9904_cryptolocker
Size

50KB
Sample

240905-pdplpszhjj
MD5

a1744115b9f52280899cc0d5aa6b9904
SHA1

8aa40a9c996873f970dddff7358ccd6bcdc6a0a5
SHA256

fdefe3f5f8ceb7f3013f7b3317550efc7be22140b491b3c4dc8f57155d9d50f7
SHA512

2ab6cb37ccf12797d15f316dd045d32148437b75cdf8b43e2e41b26afc7d836777d40440a01e59531303fb5015b1dc4ad4747e1d3cace7c1c2aa9452c51f5c0f
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nv:vj+jsMQMOtEvwDpj5HczerLO04Bc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_a1744115b9f52280899cc0d5aa6b9904_cryptolocker
- Size
  
  50KB
- MD5
  
  a1744115b9f52280899cc0d5aa6b9904
- SHA1
  
  8aa40a9c996873f970dddff7358ccd6bcdc6a0a5
- SHA256
  
  fdefe3f5f8ceb7f3013f7b3317550efc7be22140b491b3c4dc8f57155d9d50f7
- SHA512
  
  2ab6cb37ccf12797d15f316dd045d32148437b75cdf8b43e2e41b26afc7d836777d40440a01e59531303fb5015b1dc4ad4747e1d3cace7c1c2aa9452c51f5c0f
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nv:vj+jsMQMOtEvwDpj5HczerLO04Bc
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2