1af8b61e3010a38815d1efe24305870855576cff3fbc23fcb536a28bceda3990 | Triage

Sharing

General

Target

2024-09-12_4374ea1bf2183c921aa430c37986c07c_cryptolocker
Size

47KB
Sample

240912-f5fcnstbmm
MD5

4374ea1bf2183c921aa430c37986c07c
SHA1

f87ef4ab6f693145c5a6ab9bfed303419744d429
SHA256

1af8b61e3010a38815d1efe24305870855576cff3fbc23fcb536a28bceda3990
SHA512

c8bd88820eadfad0d99ed35f0d126901657e45c1a1c333abd1b63bee3a13826c7fc116632d7685910f3472ed5ecf6cd57e1db24a86602d3d2fe3abadfc61374a
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlADh:P6QFElP6k+MRQMOtEvwDpjBQpVX8AF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_4374ea1bf2183c921aa430c37986c07c_cryptolocker
- Size
  
  47KB
- MD5
  
  4374ea1bf2183c921aa430c37986c07c
- SHA1
  
  f87ef4ab6f693145c5a6ab9bfed303419744d429
- SHA256
  
  1af8b61e3010a38815d1efe24305870855576cff3fbc23fcb536a28bceda3990
- SHA512
  
  c8bd88820eadfad0d99ed35f0d126901657e45c1a1c333abd1b63bee3a13826c7fc116632d7685910f3472ed5ecf6cd57e1db24a86602d3d2fe3abadfc61374a
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlADh:P6QFElP6k+MRQMOtEvwDpjBQpVX8AF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2