344ed2e27618aa51d3af356c2b0153419549af1ff61e55b04e633d7e88ee0d13 | Triage

Sharing

General

Target

2024-09-19_731e90c74813b81dca2991deda78f4a2_cryptolocker
Size

45KB
Sample

240919-e4lmma1eql
MD5

731e90c74813b81dca2991deda78f4a2
SHA1

5134f0451e942f801f966daa29e6658129977861
SHA256

344ed2e27618aa51d3af356c2b0153419549af1ff61e55b04e633d7e88ee0d13
SHA512

d66c179c838f33cf7d062e3e5db1eeb77a578c96a57cfcde99cad368ec4af92b0ce3ae48882701c9c1c06e35fa0020a604b18cedc267d43ed86ca9405cbb018f
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0LHumD:bCDOw9aMDooc+vAlXnD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_731e90c74813b81dca2991deda78f4a2_cryptolocker
- Size
  
  45KB
- MD5
  
  731e90c74813b81dca2991deda78f4a2
- SHA1
  
  5134f0451e942f801f966daa29e6658129977861
- SHA256
  
  344ed2e27618aa51d3af356c2b0153419549af1ff61e55b04e633d7e88ee0d13
- SHA512
  
  d66c179c838f33cf7d062e3e5db1eeb77a578c96a57cfcde99cad368ec4af92b0ce3ae48882701c9c1c06e35fa0020a604b18cedc267d43ed86ca9405cbb018f
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0LHumD:bCDOw9aMDooc+vAlXnD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2