2045dcac258f88cf9b2119a293d11bdd592a14c4c8efa081df1e44df5fe08907 | Triage

Sharing

General

Target

2024-09-12_77e06c04616b70394343fb99d39b9420_cryptolocker
Size

42KB
Sample

240912-fapb4a1hlh
MD5

77e06c04616b70394343fb99d39b9420
SHA1

12e61319f6f26b934bea14f5c3da9b9df057cac8
SHA256

2045dcac258f88cf9b2119a293d11bdd592a14c4c8efa081df1e44df5fe08907
SHA512

e8e7fb7f901dbf387ecdbfcfb7acbb28252c6ffea63b07714f7a8d388a99476bb0d8467a8895eee6cdf0007f867d4842613e615984b629729e2fe4b6713f4e82
SSDEEP

768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCoq:bA6YcA/X6G0W143Qnq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_77e06c04616b70394343fb99d39b9420_cryptolocker
- Size
  
  42KB
- MD5
  
  77e06c04616b70394343fb99d39b9420
- SHA1
  
  12e61319f6f26b934bea14f5c3da9b9df057cac8
- SHA256
  
  2045dcac258f88cf9b2119a293d11bdd592a14c4c8efa081df1e44df5fe08907
- SHA512
  
  e8e7fb7f901dbf387ecdbfcfb7acbb28252c6ffea63b07714f7a8d388a99476bb0d8467a8895eee6cdf0007f867d4842613e615984b629729e2fe4b6713f4e82
- SSDEEP
  
  768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCoq:bA6YcA/X6G0W143Qnq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2