8cae90e5c5300860c6f5158ac4da84ddce2e401fadf64a03cf4d13f39796c556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-08_80c6dde3e6ab23834bc26a40f55ceddf_cryptolocker
Size

32KB
Sample

240908-dd1s7a1eln
MD5

80c6dde3e6ab23834bc26a40f55ceddf
SHA1

c4856a4ab78dad06f0d2d0285fbffc473e76c2ef
SHA256

8cae90e5c5300860c6f5158ac4da84ddce2e401fadf64a03cf4d13f39796c556
SHA512

78325fc1cc2723a56507bff9c0ee9557eedd0fe2e99d8f00a45efce716dc7982e318a1f14fe372ca6f0b5a4fd0f03442e240fea5c4c805bf085bec0ea8fb1b84
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+U8Ss87vhiL:b/yC4GyNM01GuQMNXum+NSniL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-08_80c6dde3e6ab23834bc26a40f55ceddf_cryptolocker
- Size
  
  32KB
- MD5
  
  80c6dde3e6ab23834bc26a40f55ceddf
- SHA1
  
  c4856a4ab78dad06f0d2d0285fbffc473e76c2ef
- SHA256
  
  8cae90e5c5300860c6f5158ac4da84ddce2e401fadf64a03cf4d13f39796c556
- SHA512
  
  78325fc1cc2723a56507bff9c0ee9557eedd0fe2e99d8f00a45efce716dc7982e318a1f14fe372ca6f0b5a4fd0f03442e240fea5c4c805bf085bec0ea8fb1b84
- SSDEEP
  
  384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+U8Ss87vhiL:b/yC4GyNM01GuQMNXum+NSniL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2