a83d33eba2d7bbe2d7bf434bd24444c1f22802bbf7b0c5ea34cd175b951cd165 | Triage

Sharing

General

Target

2024-09-08_8e5498c7c51dff2201a5284eaa0eeff4_cryptolocker
Size

46KB
Sample

240908-g6l3aatclc
MD5

8e5498c7c51dff2201a5284eaa0eeff4
SHA1

f5e203b78fa0c437ed31789bcddd8a28fd665e06
SHA256

a83d33eba2d7bbe2d7bf434bd24444c1f22802bbf7b0c5ea34cd175b951cd165
SHA512

3d0071966b4ad316f95f7a693856a4b1546fcd8b45f444983a7e69b525d2f6fb491bac0028119a4d797002dd147488a5234a7d4c3df8ea022fcb8d116c6444e1
SSDEEP

768:bao/2n1TCraU6GD1a4X1XOQ69zbjlAAX5e9zH:bF/y2lFizbR9XwzH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-08_8e5498c7c51dff2201a5284eaa0eeff4_cryptolocker
- Size
  
  46KB
- MD5
  
  8e5498c7c51dff2201a5284eaa0eeff4
- SHA1
  
  f5e203b78fa0c437ed31789bcddd8a28fd665e06
- SHA256
  
  a83d33eba2d7bbe2d7bf434bd24444c1f22802bbf7b0c5ea34cd175b951cd165
- SHA512
  
  3d0071966b4ad316f95f7a693856a4b1546fcd8b45f444983a7e69b525d2f6fb491bac0028119a4d797002dd147488a5234a7d4c3df8ea022fcb8d116c6444e1
- SSDEEP
  
  768:bao/2n1TCraU6GD1a4X1XOQ69zbjlAAX5e9zH:bF/y2lFizbR9XwzH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2