f63d95551be172ada403adf50444deb0fb4e4a6d27d8930a72090a4911059d31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-25_508e667f2cf54b8d5fbb35cbc63926dd_cryptolocker
Size

32KB
Sample

240925-h85g3swajf
MD5

508e667f2cf54b8d5fbb35cbc63926dd
SHA1

5a82fe93bafafd42ec77985193a9ad8bec7b381e
SHA256

f63d95551be172ada403adf50444deb0fb4e4a6d27d8930a72090a4911059d31
SHA512

d182285c4c231bdd7dbd82d9701c612cda6ad9265ea26d1960e89c24f718936f53631d5b10c5dfb33c765b531a23fe276b8400d02f70befa2771616b57e53ddc
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdoS:bAvJCYOOvbRPDEgXRcJT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-25_508e667f2cf54b8d5fbb35cbc63926dd_cryptolocker
- Size
  
  32KB
- MD5
  
  508e667f2cf54b8d5fbb35cbc63926dd
- SHA1
  
  5a82fe93bafafd42ec77985193a9ad8bec7b381e
- SHA256
  
  f63d95551be172ada403adf50444deb0fb4e4a6d27d8930a72090a4911059d31
- SHA512
  
  d182285c4c231bdd7dbd82d9701c612cda6ad9265ea26d1960e89c24f718936f53631d5b10c5dfb33c765b531a23fe276b8400d02f70befa2771616b57e53ddc
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdoS:bAvJCYOOvbRPDEgXRcJT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2