8e238671fa8ec435e379d5aa8759d1decb8b1b8aa4f63fbd665e8c66d6b50dc0 | Triage

Sharing

General

Target

2024-09-19_cda658974c5cadf4a833c739b188da56_cryptolocker
Size

41KB
Sample

240919-d8js6aygpd
MD5

cda658974c5cadf4a833c739b188da56
SHA1

49f17f2bfeb3439a47ca9318875a0ca9efe17632
SHA256

8e238671fa8ec435e379d5aa8759d1decb8b1b8aa4f63fbd665e8c66d6b50dc0
SHA512

27ea4bac53fdb3eaba91ad30cbf581554fcda20d43d4cffb194c1c7cee9ea0808a1ec46209755fa2c16b700b4ed05f184bf0b02bcae4b94bb3d52d83ba5e18ce
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B94IOMHo3sxP1Tx:btB9g/WItCSsAGjX7r3BPOMHoc/QQJPH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_cda658974c5cadf4a833c739b188da56_cryptolocker
- Size
  
  41KB
- MD5
  
  cda658974c5cadf4a833c739b188da56
- SHA1
  
  49f17f2bfeb3439a47ca9318875a0ca9efe17632
- SHA256
  
  8e238671fa8ec435e379d5aa8759d1decb8b1b8aa4f63fbd665e8c66d6b50dc0
- SHA512
  
  27ea4bac53fdb3eaba91ad30cbf581554fcda20d43d4cffb194c1c7cee9ea0808a1ec46209755fa2c16b700b4ed05f184bf0b02bcae4b94bb3d52d83ba5e18ce
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B94IOMHo3sxP1Tx:btB9g/WItCSsAGjX7r3BPOMHoc/QQJPH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2