8c4834ab9f6104353d567d6dde6bdaad6d1f9e006211570a66736d846ce1def0 | Triage

Sharing

General

Target

2024-09-19_f7d9fdf1ede6df26191272ac9ce04d3d_cryptolocker
Size

34KB
Sample

240919-eb24xazcnj
MD5

f7d9fdf1ede6df26191272ac9ce04d3d
SHA1

465b71e46532379f231a318970b62504ed19a137
SHA256

8c4834ab9f6104353d567d6dde6bdaad6d1f9e006211570a66736d846ce1def0
SHA512

6df6dd3059773e631a80fdcad1fd6090593213e5243ff00e42c79cdb5c60561c3165d8b78a9a7fb373c2010b921a07cadfa0a9c89e5e8577a03489de548092ac
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcsgYKm:b/yC4GyNM01GuQMNXw2PSjSKkcJYKm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_f7d9fdf1ede6df26191272ac9ce04d3d_cryptolocker
- Size
  
  34KB
- MD5
  
  f7d9fdf1ede6df26191272ac9ce04d3d
- SHA1
  
  465b71e46532379f231a318970b62504ed19a137
- SHA256
  
  8c4834ab9f6104353d567d6dde6bdaad6d1f9e006211570a66736d846ce1def0
- SHA512
  
  6df6dd3059773e631a80fdcad1fd6090593213e5243ff00e42c79cdb5c60561c3165d8b78a9a7fb373c2010b921a07cadfa0a9c89e5e8577a03489de548092ac
- SSDEEP
  
  384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcsgYKm:b/yC4GyNM01GuQMNXw2PSjSKkcJYKm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2