4854c6d52db692a643eeb2a2858e03865ed26eb5a2c6f751b85b0b3b3e5cc680 | Triage

Sharing

General

Target

2024-09-13_8d0fa4bd663de56f9d1b42bf21c9544a_cryptolocker
Size

43KB
Sample

240913-c8naxazdlk
MD5

8d0fa4bd663de56f9d1b42bf21c9544a
SHA1

34a88b8e582d3f97f3987eee0b38bf14e00782b7
SHA256

4854c6d52db692a643eeb2a2858e03865ed26eb5a2c6f751b85b0b3b3e5cc680
SHA512

d0e8e9bd13577f4e4423a1dfc52c881449b94af61fdea610f23381eca42eb529dd208af7671b6922089ebb78308b7d308346b62d016ffeaa72414870d70d2dd8
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrd:bCDOw9aMDooc+vAqjB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-13_8d0fa4bd663de56f9d1b42bf21c9544a_cryptolocker
- Size
  
  43KB
- MD5
  
  8d0fa4bd663de56f9d1b42bf21c9544a
- SHA1
  
  34a88b8e582d3f97f3987eee0b38bf14e00782b7
- SHA256
  
  4854c6d52db692a643eeb2a2858e03865ed26eb5a2c6f751b85b0b3b3e5cc680
- SHA512
  
  d0e8e9bd13577f4e4423a1dfc52c881449b94af61fdea610f23381eca42eb529dd208af7671b6922089ebb78308b7d308346b62d016ffeaa72414870d70d2dd8
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrd:bCDOw9aMDooc+vAqjB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2