fba5725177db8594f6f1d487f8e1b96d44acac5ad4767f01138f7cf7b4816fae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_f7f692e34be6c9c83cc6ef5b776abb82_cryptolocker
Size

65KB
Sample

240913-ll5fcawenl
MD5

f7f692e34be6c9c83cc6ef5b776abb82
SHA1

4eb47df3716756164ae5e184e2471ca7b86cfdfd
SHA256

fba5725177db8594f6f1d487f8e1b96d44acac5ad4767f01138f7cf7b4816fae
SHA512

952445cc1a6573bd17cb398b5aef0f9011f57b504a150098b84e13e0fa3b000e359ea949306a7bb54a5a6e90e4febdcc3758625599a30616cc173b03165f9fc0
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wd:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-13_f7f692e34be6c9c83cc6ef5b776abb82_cryptolocker
- Size
  
  65KB
- MD5
  
  f7f692e34be6c9c83cc6ef5b776abb82
- SHA1
  
  4eb47df3716756164ae5e184e2471ca7b86cfdfd
- SHA256
  
  fba5725177db8594f6f1d487f8e1b96d44acac5ad4767f01138f7cf7b4816fae
- SHA512
  
  952445cc1a6573bd17cb398b5aef0f9011f57b504a150098b84e13e0fa3b000e359ea949306a7bb54a5a6e90e4febdcc3758625599a30616cc173b03165f9fc0
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wd:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2