d4d82b82d9804958e88d9f3e412009f7c1548bff93813123226321ddd5bbd258 | Triage

Sharing

General

Target

2024-09-19_eb45764008e84988786e04d65eaa6558_cryptolocker
Size

68KB
Sample

240919-ea79jazbrn
MD5

eb45764008e84988786e04d65eaa6558
SHA1

35f1b344789fb2e44ae1b1b9d370cd89100ce719
SHA256

d4d82b82d9804958e88d9f3e412009f7c1548bff93813123226321ddd5bbd258
SHA512

161159ebf1851e61deab20ec2de3a272b30bee1ee4df491d873dc49f67ec42a6405819bd07a33d17720e1546b39a0a8b2b0b24ab0984c1e90c4628b08e9e63ed
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEA:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_eb45764008e84988786e04d65eaa6558_cryptolocker
- Size
  
  68KB
- MD5
  
  eb45764008e84988786e04d65eaa6558
- SHA1
  
  35f1b344789fb2e44ae1b1b9d370cd89100ce719
- SHA256
  
  d4d82b82d9804958e88d9f3e412009f7c1548bff93813123226321ddd5bbd258
- SHA512
  
  161159ebf1851e61deab20ec2de3a272b30bee1ee4df491d873dc49f67ec42a6405819bd07a33d17720e1546b39a0a8b2b0b24ab0984c1e90c4628b08e9e63ed
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEA:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Y
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2