7f4f34e0480c423eb2625e926dc5186fa96aaf28c91c650ff323ed63948ca76b | Triage

Sharing

General

Target

2024-09-19_4e64ff142ee53bd24fad933afa321264_cryptolocker
Size

80KB
Sample

240919-e2paqs1bre
MD5

4e64ff142ee53bd24fad933afa321264
SHA1

1a9ba4140e6f9c0096946dae5661fda50cea833f
SHA256

7f4f34e0480c423eb2625e926dc5186fa96aaf28c91c650ff323ed63948ca76b
SHA512

bf754163e3314882b618a2a3a9c1066cfd21a116e1836b7c1b8ca1673412dbe162ce58adcbbaf25336988827a55f7241d918c5e4e124e4757ca146d23c16b140
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFHi:V6QFElP6n+gMQMOtEvwDpjyaLccVNlG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_4e64ff142ee53bd24fad933afa321264_cryptolocker
- Size
  
  80KB
- MD5
  
  4e64ff142ee53bd24fad933afa321264
- SHA1
  
  1a9ba4140e6f9c0096946dae5661fda50cea833f
- SHA256
  
  7f4f34e0480c423eb2625e926dc5186fa96aaf28c91c650ff323ed63948ca76b
- SHA512
  
  bf754163e3314882b618a2a3a9c1066cfd21a116e1836b7c1b8ca1673412dbe162ce58adcbbaf25336988827a55f7241d918c5e4e124e4757ca146d23c16b140
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFHi:V6QFElP6n+gMQMOtEvwDpjyaLccVNlG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2