143bafc111620f325f1cad521b4f1a1eb92567a353e169d8a1c9394d9f1a3649 | Triage

Sharing

General

Target

2024-09-19_8a66ee025c342901133f7689b6c4f216_cryptolocker
Size

35KB
Sample

240919-g8dtpavekb
MD5

8a66ee025c342901133f7689b6c4f216
SHA1

20192bd31f69cbaf1b1d2a02d803af6eeef64e5a
SHA256

143bafc111620f325f1cad521b4f1a1eb92567a353e169d8a1c9394d9f1a3649
SHA512

7a132b192a0545934efd849bdbf94b191927906edebc45b4ecbc57526a40aab53e6eb4bd05c7d33340099de4ed4d26fab61bf8ee7a3e29caa5211162de85cefc
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA02AxF9:btB9g/WItCSsAGjX7e9NZAxf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_8a66ee025c342901133f7689b6c4f216_cryptolocker
- Size
  
  35KB
- MD5
  
  8a66ee025c342901133f7689b6c4f216
- SHA1
  
  20192bd31f69cbaf1b1d2a02d803af6eeef64e5a
- SHA256
  
  143bafc111620f325f1cad521b4f1a1eb92567a353e169d8a1c9394d9f1a3649
- SHA512
  
  7a132b192a0545934efd849bdbf94b191927906edebc45b4ecbc57526a40aab53e6eb4bd05c7d33340099de4ed4d26fab61bf8ee7a3e29caa5211162de85cefc
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA02AxF9:btB9g/WItCSsAGjX7e9NZAxf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2