429183b928a7b644e78d29695179b081fe2fd6692d698397ddfce8a2ff2beb96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_90dbeef42d7ddc6daab58d56efa3e8aa_cryptolocker
Size

53KB
Sample

240907-bgwyasxalk
MD5

90dbeef42d7ddc6daab58d56efa3e8aa
SHA1

7b24f4485c9e32c61527e006ee12febf50165733
SHA256

429183b928a7b644e78d29695179b081fe2fd6692d698397ddfce8a2ff2beb96
SHA512

fc748bb49843011568debed903fae17166b02098a439f352b7d2179e4de29c57a6a1ad05547f49283f4329a5f9a117ab613315cd85b89ed3d46e2bdbad84e892
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTYv:X6QFElP6n+gJBMOtEvwDpjBtExmlkv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_90dbeef42d7ddc6daab58d56efa3e8aa_cryptolocker
- Size
  
  53KB
- MD5
  
  90dbeef42d7ddc6daab58d56efa3e8aa
- SHA1
  
  7b24f4485c9e32c61527e006ee12febf50165733
- SHA256
  
  429183b928a7b644e78d29695179b081fe2fd6692d698397ddfce8a2ff2beb96
- SHA512
  
  fc748bb49843011568debed903fae17166b02098a439f352b7d2179e4de29c57a6a1ad05547f49283f4329a5f9a117ab613315cd85b89ed3d46e2bdbad84e892
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTYv:X6QFElP6n+gJBMOtEvwDpjBtExmlkv
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2