7bca76f6225e4948a64ecd5ef8fa03f3405aacbe882859b6e2bfd7f4b28a5484 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-18_fe9f04694204588cf8e0541f865e26e7_cryptolocker
Size

38KB
Sample

240918-y5cwnascjl
MD5

fe9f04694204588cf8e0541f865e26e7
SHA1

9dee1bacb90300d6a75dd55e9689e943d07c4073
SHA256

7bca76f6225e4948a64ecd5ef8fa03f3405aacbe882859b6e2bfd7f4b28a5484
SHA512

34fc9b7547c80f921c80646315ab37c6343a25ebcf0c4a3a8760bd61f31bf511c6fffa6c7e432557ebe97d4393065f0de4779f321f06074139e453f8e1a6d78f
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+rXe:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+ru

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-18_fe9f04694204588cf8e0541f865e26e7_cryptolocker
- Size
  
  38KB
- MD5
  
  fe9f04694204588cf8e0541f865e26e7
- SHA1
  
  9dee1bacb90300d6a75dd55e9689e943d07c4073
- SHA256
  
  7bca76f6225e4948a64ecd5ef8fa03f3405aacbe882859b6e2bfd7f4b28a5484
- SHA512
  
  34fc9b7547c80f921c80646315ab37c6343a25ebcf0c4a3a8760bd61f31bf511c6fffa6c7e432557ebe97d4393065f0de4779f321f06074139e453f8e1a6d78f
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+rXe:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+ru
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2