5b23743933e04a66e7b9b42e8255ceda801a4e6fc12d26862bd43b89562165dd | Triage

Sharing

General

Target

2024-09-07_d4b25d3ee24364dffbcf20a4f1d0f8db_cryptolocker
Size

35KB
Sample

240907-bsbrhaxhre
MD5

d4b25d3ee24364dffbcf20a4f1d0f8db
SHA1

a54acd7a19ed423ce078a836ada0095662c22ef0
SHA256

5b23743933e04a66e7b9b42e8255ceda801a4e6fc12d26862bd43b89562165dd
SHA512

ce7a464eccc9162e2ac1cd02501a5097cca24a8e49584f6914173a2b2d7a2b26efc6d464306e39f499de5c4572ddc0bf6df619cc16cff7795327d50c083fb139
SSDEEP

768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmU3:bxNrC7kYo1Fxf2rYPL3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_d4b25d3ee24364dffbcf20a4f1d0f8db_cryptolocker
- Size
  
  35KB
- MD5
  
  d4b25d3ee24364dffbcf20a4f1d0f8db
- SHA1
  
  a54acd7a19ed423ce078a836ada0095662c22ef0
- SHA256
  
  5b23743933e04a66e7b9b42e8255ceda801a4e6fc12d26862bd43b89562165dd
- SHA512
  
  ce7a464eccc9162e2ac1cd02501a5097cca24a8e49584f6914173a2b2d7a2b26efc6d464306e39f499de5c4572ddc0bf6df619cc16cff7795327d50c083fb139
- SSDEEP
  
  768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmU3:bxNrC7kYo1Fxf2rYPL3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2