84a713481c29d7831e53ec14f489d16c17bfac889efcc51d37ebac3f63711a52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-12_44d070534ff20fce5708fb556b818fc0_cryptolocker
Size

47KB
Sample

240912-2ac5qayakq
MD5

44d070534ff20fce5708fb556b818fc0
SHA1

f96f75dd3a61ba5056bfbdf8f51b620dd68eb3e7
SHA256

84a713481c29d7831e53ec14f489d16c17bfac889efcc51d37ebac3f63711a52
SHA512

2c15ba963d4cc1cfdecff0f5d124a74af4c18cc9e4c05c4302d3bc8e14a7883591d78bacfe5b987eca31b5cefd64d75cde09db8e7447330eb11f9b7533951121
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3BL:bm74zYcgT/EkM0ryfjd3BL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_44d070534ff20fce5708fb556b818fc0_cryptolocker
- Size
  
  47KB
- MD5
  
  44d070534ff20fce5708fb556b818fc0
- SHA1
  
  f96f75dd3a61ba5056bfbdf8f51b620dd68eb3e7
- SHA256
  
  84a713481c29d7831e53ec14f489d16c17bfac889efcc51d37ebac3f63711a52
- SHA512
  
  2c15ba963d4cc1cfdecff0f5d124a74af4c18cc9e4c05c4302d3bc8e14a7883591d78bacfe5b987eca31b5cefd64d75cde09db8e7447330eb11f9b7533951121
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3BL:bm74zYcgT/EkM0ryfjd3BL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2