d4a42b3bdf1e805632a3d2250d7d9b334d75ac591887a1bb33ab40cb7a7bb374 | Triage

Sharing

General

Target

2024-09-19_08a696a0ed90c91838cb88618a70b8a9_cryptolocker
Size

47KB
Sample

240919-ezezaa1bjc
MD5

08a696a0ed90c91838cb88618a70b8a9
SHA1

1c4e9ee5d36ed75a1e7d6311d9159641c12e18f6
SHA256

d4a42b3bdf1e805632a3d2250d7d9b334d75ac591887a1bb33ab40cb7a7bb374
SHA512

ca3253382589e211d5508a8e9750b60d2e9f41bf3c10fbf755d4e99c44c280ffdd0a1520fef995f3ce86352605270727b7da39d0464eb4a2c771a489d4c34d7a
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9J3c:X6QFElP6n+gJQMOtEvwDpjBmzDkWDrc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_08a696a0ed90c91838cb88618a70b8a9_cryptolocker
- Size
  
  47KB
- MD5
  
  08a696a0ed90c91838cb88618a70b8a9
- SHA1
  
  1c4e9ee5d36ed75a1e7d6311d9159641c12e18f6
- SHA256
  
  d4a42b3bdf1e805632a3d2250d7d9b334d75ac591887a1bb33ab40cb7a7bb374
- SHA512
  
  ca3253382589e211d5508a8e9750b60d2e9f41bf3c10fbf755d4e99c44c280ffdd0a1520fef995f3ce86352605270727b7da39d0464eb4a2c771a489d4c34d7a
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9J3c:X6QFElP6n+gJQMOtEvwDpjBmzDkWDrc
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2