80d8c92149b8701c58f1e9bc80febd64ad6717ab6b61aad8ee5cc34d8ea618dd | Triage

Sharing

General

Target

2024-09-11_02b2a206b6d3f9c7e3c9d05a1f3e69af_cryptolocker
Size

39KB
Sample

240911-ey79fatble
MD5

02b2a206b6d3f9c7e3c9d05a1f3e69af
SHA1

d59de7ae972201eb2d00223a3cafe80486d73f79
SHA256

80d8c92149b8701c58f1e9bc80febd64ad6717ab6b61aad8ee5cc34d8ea618dd
SHA512

40c802a38a4f6b6f35a19a8e9c60b68ba2dfcbd4632ed91e2383587533f0b133cab461518a18c5436239d67eb61c46e231f8e3d067a4be946a848d329e77ae86
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD5:ZzFbxmLPWQMOtEvwDpjLeJAsKc5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-11_02b2a206b6d3f9c7e3c9d05a1f3e69af_cryptolocker
- Size
  
  39KB
- MD5
  
  02b2a206b6d3f9c7e3c9d05a1f3e69af
- SHA1
  
  d59de7ae972201eb2d00223a3cafe80486d73f79
- SHA256
  
  80d8c92149b8701c58f1e9bc80febd64ad6717ab6b61aad8ee5cc34d8ea618dd
- SHA512
  
  40c802a38a4f6b6f35a19a8e9c60b68ba2dfcbd4632ed91e2383587533f0b133cab461518a18c5436239d67eb61c46e231f8e3d067a4be946a848d329e77ae86
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD5:ZzFbxmLPWQMOtEvwDpjLeJAsKc5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2