72b03a8935f9d119de4874486a46b5bbbd44567be38bb6f6d4b97b864f9dd9ba | Triage

Sharing

General

Target

2024-09-06_bc8da5a67db6ffdb653cc061a965d025_cryptolocker
Size

40KB
Sample

240906-hcnjpa1flj
MD5

bc8da5a67db6ffdb653cc061a965d025
SHA1

04199c25afe0f629c3e1ec07fc17943b06e42f7b
SHA256

72b03a8935f9d119de4874486a46b5bbbd44567be38bb6f6d4b97b864f9dd9ba
SHA512

c2aca7ad6cda59254de0cff4925884bb8057bf387d32c1b51c44cf0f85e95ac66190cfc7f445fb10fd83582f380dd1a71d2831b5a3a2039f2d1ab9f516c69fec
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD+Z:ZzFbxmLPWQMOtEvwDpjLeJAsKck

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-06_bc8da5a67db6ffdb653cc061a965d025_cryptolocker
- Size
  
  40KB
- MD5
  
  bc8da5a67db6ffdb653cc061a965d025
- SHA1
  
  04199c25afe0f629c3e1ec07fc17943b06e42f7b
- SHA256
  
  72b03a8935f9d119de4874486a46b5bbbd44567be38bb6f6d4b97b864f9dd9ba
- SHA512
  
  c2aca7ad6cda59254de0cff4925884bb8057bf387d32c1b51c44cf0f85e95ac66190cfc7f445fb10fd83582f380dd1a71d2831b5a3a2039f2d1ab9f516c69fec
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD+Z:ZzFbxmLPWQMOtEvwDpjLeJAsKck
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2