606f6b8da4a238985e15df547cfcd08ae578a4f9b6d8f29512faaf35ad9aaec0 | Triage

Sharing

General

Target

2024-09-05_b8b222dcd033cc712dba831fa98ff70b_cryptolocker
Size

40KB
Sample

240905-pehjsa1enf
MD5

b8b222dcd033cc712dba831fa98ff70b
SHA1

f091ad6cbaea728ba3c3824655193c1df150836a
SHA256

606f6b8da4a238985e15df547cfcd08ae578a4f9b6d8f29512faaf35ad9aaec0
SHA512

0712563794fdddcb38f21f861e59dd4456fe1564bf49a8299da63b3595017a6db79d91ddbc0f4b1f29752bd5ccf917fe1f2c42361ef05cb1b01f60885bc2b520
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD+B:ZzFbxmLPWQMOtEvwDpjLeJAsKcE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_b8b222dcd033cc712dba831fa98ff70b_cryptolocker
- Size
  
  40KB
- MD5
  
  b8b222dcd033cc712dba831fa98ff70b
- SHA1
  
  f091ad6cbaea728ba3c3824655193c1df150836a
- SHA256
  
  606f6b8da4a238985e15df547cfcd08ae578a4f9b6d8f29512faaf35ad9aaec0
- SHA512
  
  0712563794fdddcb38f21f861e59dd4456fe1564bf49a8299da63b3595017a6db79d91ddbc0f4b1f29752bd5ccf917fe1f2c42361ef05cb1b01f60885bc2b520
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD+B:ZzFbxmLPWQMOtEvwDpjLeJAsKcE
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2