6895ceec0deea473bc2bbca66b729f9cf7d4404f9dc9423867c3ebaab95436e4 | Triage

Sharing

General

Target

2024-09-27_8777f93c32c091df08c74188110e243d_cryptolocker
Size

41KB
Sample

240927-g8qhgszamk
MD5

8777f93c32c091df08c74188110e243d
SHA1

d52c8e87a2cf75ea7455d5fdc34c2d4fb2de8fff
SHA256

6895ceec0deea473bc2bbca66b729f9cf7d4404f9dc9423867c3ebaab95436e4
SHA512

52a0eb709e3bd3bfb27e36e8d595d5874347a8f29cd0b0581f7f35fe9cf7ee48ad9c9a5604ce3c7edf52758c01cbf3462a0df511048cad462f4244b4e32c5d78
SSDEEP

768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCRB:bA6YcA/X6G0W143QI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-27_8777f93c32c091df08c74188110e243d_cryptolocker
- Size
  
  41KB
- MD5
  
  8777f93c32c091df08c74188110e243d
- SHA1
  
  d52c8e87a2cf75ea7455d5fdc34c2d4fb2de8fff
- SHA256
  
  6895ceec0deea473bc2bbca66b729f9cf7d4404f9dc9423867c3ebaab95436e4
- SHA512
  
  52a0eb709e3bd3bfb27e36e8d595d5874347a8f29cd0b0581f7f35fe9cf7ee48ad9c9a5604ce3c7edf52758c01cbf3462a0df511048cad462f4244b4e32c5d78
- SSDEEP
  
  768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCRB:bA6YcA/X6G0W143QI
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2