7bbc7b9eb275be6868af9f03af1b9440263bf2473113d75c332547e573fc7925 | Triage

Sharing

General

Target

2024-09-08_e256a6f89439ff2705bd9b9ba8801c61_cryptolocker
Size

50KB
Sample

240908-dvlqlavcrf
MD5

e256a6f89439ff2705bd9b9ba8801c61
SHA1

fabb7eae86075151bdc61f4adb97238776fa332c
SHA256

7bbc7b9eb275be6868af9f03af1b9440263bf2473113d75c332547e573fc7925
SHA512

f158f741b7bf80375856704bbf519b8a165b8013c4db2f6a80abb5bd0e6ad723ba2ba96c01812c8e401055bd50bfa49776cedd170e00a4e550b44621b0e22416
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NO2BjjH:xj+VGMOtEvwDpjy+TN41jz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-08_e256a6f89439ff2705bd9b9ba8801c61_cryptolocker
- Size
  
  50KB
- MD5
  
  e256a6f89439ff2705bd9b9ba8801c61
- SHA1
  
  fabb7eae86075151bdc61f4adb97238776fa332c
- SHA256
  
  7bbc7b9eb275be6868af9f03af1b9440263bf2473113d75c332547e573fc7925
- SHA512
  
  f158f741b7bf80375856704bbf519b8a165b8013c4db2f6a80abb5bd0e6ad723ba2ba96c01812c8e401055bd50bfa49776cedd170e00a4e550b44621b0e22416
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NO2BjjH:xj+VGMOtEvwDpjy+TN41jz
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2