757f89539a513edf3fc0ccefe2c15ffe2cf5d21f9909842e1ecd2b0b6c95184e | Triage

Sharing

General

Target

2024-09-21_8f6e89275659fc040b8adc4abe188dba_cryptolocker
Size

47KB
Sample

240921-f4fbaaxajb
MD5

8f6e89275659fc040b8adc4abe188dba
SHA1

fe90b3868d232d41637b285e29072d76d08853d4
SHA256

757f89539a513edf3fc0ccefe2c15ffe2cf5d21f9909842e1ecd2b0b6c95184e
SHA512

26ea8be6d8e2ef3071bbbb5c919611f58304928d478b30e8e9695d5bbca898c05369d206728b23989ebc7da503b589fea32205a32808b478a5cd36a09b012f37
SSDEEP

768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WtyU8jf:qmbhXDmjr5MOtEvwDpj5cDtKkQZQPdUQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_8f6e89275659fc040b8adc4abe188dba_cryptolocker
- Size
  
  47KB
- MD5
  
  8f6e89275659fc040b8adc4abe188dba
- SHA1
  
  fe90b3868d232d41637b285e29072d76d08853d4
- SHA256
  
  757f89539a513edf3fc0ccefe2c15ffe2cf5d21f9909842e1ecd2b0b6c95184e
- SHA512
  
  26ea8be6d8e2ef3071bbbb5c919611f58304928d478b30e8e9695d5bbca898c05369d206728b23989ebc7da503b589fea32205a32808b478a5cd36a09b012f37
- SSDEEP
  
  768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WtyU8jf:qmbhXDmjr5MOtEvwDpj5cDtKkQZQPdUQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2