fe2fc165f813fb4769d9db6d27f0dc018cd6a63cebd490a8dbca774d4040885a | Triage

Sharing

General

Target

2024-09-13_1bbd2f080b4186c0ea2741af755081b0_cryptolocker
Size

70KB
Sample

240913-d21s4asajr
MD5

1bbd2f080b4186c0ea2741af755081b0
SHA1

5e2b8139f3218960a94363c0cf090470c934d435
SHA256

fe2fc165f813fb4769d9db6d27f0dc018cd6a63cebd490a8dbca774d4040885a
SHA512

9d57377b6bc4844b6dee06b930d66cf90c8d13ed7f9d0ebd42e9041107a4bc6850de235124452d8e0802ab9e0915c2816e182d9dc0e19b42a65f6df1069a9c40
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RC:vj+jsMQMOtEvwDpj5HZYTjipvF24gz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-13_1bbd2f080b4186c0ea2741af755081b0_cryptolocker
- Size
  
  70KB
- MD5
  
  1bbd2f080b4186c0ea2741af755081b0
- SHA1
  
  5e2b8139f3218960a94363c0cf090470c934d435
- SHA256
  
  fe2fc165f813fb4769d9db6d27f0dc018cd6a63cebd490a8dbca774d4040885a
- SHA512
  
  9d57377b6bc4844b6dee06b930d66cf90c8d13ed7f9d0ebd42e9041107a4bc6850de235124452d8e0802ab9e0915c2816e182d9dc0e19b42a65f6df1069a9c40
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RC:vj+jsMQMOtEvwDpj5HZYTjipvF24gz
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2