b5f54d1bf8406fca2a2a8e70182f31ea0c2183eaeb92c7c2968ed2f8ec828fc0 | Triage

Sharing

General

Target

2024-09-05_c4c49c0f051730a451e417efdb82d397_cryptolocker
Size

49KB
Sample

240905-pe1qcs1epg
MD5

c4c49c0f051730a451e417efdb82d397
SHA1

3e7b0a0f77ee06625a78eb10052fa4bfb3a9ec59
SHA256

b5f54d1bf8406fca2a2a8e70182f31ea0c2183eaeb92c7c2968ed2f8ec828fc0
SHA512

af4629b59194df9fb292f3edd6610bc1e5d3ab505aa94e430e79df066441cdf37a8f8ad81962ff6791e37c6744f02a88ce35a7273259b5a9d7c375ccf4d6fd8b
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITe:26Q0ElP6G+gBQMOtEvwDpjgWMl7Te

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_c4c49c0f051730a451e417efdb82d397_cryptolocker
- Size
  
  49KB
- MD5
  
  c4c49c0f051730a451e417efdb82d397
- SHA1
  
  3e7b0a0f77ee06625a78eb10052fa4bfb3a9ec59
- SHA256
  
  b5f54d1bf8406fca2a2a8e70182f31ea0c2183eaeb92c7c2968ed2f8ec828fc0
- SHA512
  
  af4629b59194df9fb292f3edd6610bc1e5d3ab505aa94e430e79df066441cdf37a8f8ad81962ff6791e37c6744f02a88ce35a7273259b5a9d7c375ccf4d6fd8b
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITe:26Q0ElP6G+gBQMOtEvwDpjgWMl7Te
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2