546eb34fff98c829cd14aaac4cc94a829b354c2a810daffbeb7a849148e0cfa3 | Triage

Sharing

General

Target

2024-09-05_eba9f5bb968d097c484a5e04a9b2bfaf_cryptolocker
Size

47KB
Sample

240905-pggp9s1fjg
MD5

eba9f5bb968d097c484a5e04a9b2bfaf
SHA1

b5486790b55395cd61679a8b97b6825889da024d
SHA256

546eb34fff98c829cd14aaac4cc94a829b354c2a810daffbeb7a849148e0cfa3
SHA512

b1f462baa649f5d7d1e75e27944fbfba6960d3e99f504dee3a873cb47a806dd9195c72002e34d78214cd3b0e0ff9cb4ae11adb19425342b5777011ea2a291864
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJl2:6j+1NMOtEvwDpjrRraJI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_eba9f5bb968d097c484a5e04a9b2bfaf_cryptolocker
- Size
  
  47KB
- MD5
  
  eba9f5bb968d097c484a5e04a9b2bfaf
- SHA1
  
  b5486790b55395cd61679a8b97b6825889da024d
- SHA256
  
  546eb34fff98c829cd14aaac4cc94a829b354c2a810daffbeb7a849148e0cfa3
- SHA512
  
  b1f462baa649f5d7d1e75e27944fbfba6960d3e99f504dee3a873cb47a806dd9195c72002e34d78214cd3b0e0ff9cb4ae11adb19425342b5777011ea2a291864
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJl2:6j+1NMOtEvwDpjrRraJI
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2