a5f0a26c5ad0c2e707703a5786fcbbfb1ac51d939cf1b87d5308961b1cdec6ff | Triage

Sharing

General

Target

2024-09-05_4f0af0cc9d12dbe91fa19b97f756ad87_cryptolocker
Size

37KB
Sample

240905-pnb4cs1bjl
MD5

4f0af0cc9d12dbe91fa19b97f756ad87
SHA1

c87a45642de9b2ff1d46815aa7847ab4396787a2
SHA256

a5f0a26c5ad0c2e707703a5786fcbbfb1ac51d939cf1b87d5308961b1cdec6ff
SHA512

02f481edd3c1535c37253f1a678bb2f72b567f68e13b57bbe730cbd4ed22b250a180568354604da15be809f286eef90238d782bdd8e75467a9b466211db4722f
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Ur:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_4f0af0cc9d12dbe91fa19b97f756ad87_cryptolocker
- Size
  
  37KB
- MD5
  
  4f0af0cc9d12dbe91fa19b97f756ad87
- SHA1
  
  c87a45642de9b2ff1d46815aa7847ab4396787a2
- SHA256
  
  a5f0a26c5ad0c2e707703a5786fcbbfb1ac51d939cf1b87d5308961b1cdec6ff
- SHA512
  
  02f481edd3c1535c37253f1a678bb2f72b567f68e13b57bbe730cbd4ed22b250a180568354604da15be809f286eef90238d782bdd8e75467a9b466211db4722f
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Ur:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XY
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2