6d88d4ca045ceb522aef47d7fd681c37d19a1b17017276804f563d73a4e5819b | Triage

Sharing

General

Target

2024-09-19_f8f17949c5c6d361ea79e996ada66a97_cryptolocker
Size

93KB
Sample

240919-eb6gbszcnp
MD5

f8f17949c5c6d361ea79e996ada66a97
SHA1

81abc6b9157a2e3bd1593d6e83deb35d37b11006
SHA256

6d88d4ca045ceb522aef47d7fd681c37d19a1b17017276804f563d73a4e5819b
SHA512

00bc71947dac266ef072993a8b7a39c33b78bd0bfbf7725f78941c49274d8a9aa76ef89048fd8b06a6614471b264ca4cf0ba10678bfa022ad1832f63668de316
SSDEEP

1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQNpZYz6:vCjsIOtEvwDpj5H8zPsw6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_f8f17949c5c6d361ea79e996ada66a97_cryptolocker
- Size
  
  93KB
- MD5
  
  f8f17949c5c6d361ea79e996ada66a97
- SHA1
  
  81abc6b9157a2e3bd1593d6e83deb35d37b11006
- SHA256
  
  6d88d4ca045ceb522aef47d7fd681c37d19a1b17017276804f563d73a4e5819b
- SHA512
  
  00bc71947dac266ef072993a8b7a39c33b78bd0bfbf7725f78941c49274d8a9aa76ef89048fd8b06a6614471b264ca4cf0ba10678bfa022ad1832f63668de316
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQNpZYz6:vCjsIOtEvwDpj5H8zPsw6
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2