b779a5d7b27b9685a15d5e6ec04c832a2bf72bfdb579704eb47c8d86316cec06 | Triage

Sharing

General

Target

2024-09-28_d8f98cff825d8efc646d78aa3ec4881e_cryptolocker
Size

53KB
Sample

240928-jgd2gstfnr
MD5

d8f98cff825d8efc646d78aa3ec4881e
SHA1

73070a817a7a715246276b72db0bd6153bf9975c
SHA256

b779a5d7b27b9685a15d5e6ec04c832a2bf72bfdb579704eb47c8d86316cec06
SHA512

b93693967bd9a8599611eb0917db564695f25824d8b6784799ae3e956699684db4c23eb0ac19ab5f432de73f23106698fcb581431c64992e95866e6c5f6f8c8f
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlDq:V6a+pOtEvwDpjvDY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-28_d8f98cff825d8efc646d78aa3ec4881e_cryptolocker
- Size
  
  53KB
- MD5
  
  d8f98cff825d8efc646d78aa3ec4881e
- SHA1
  
  73070a817a7a715246276b72db0bd6153bf9975c
- SHA256
  
  b779a5d7b27b9685a15d5e6ec04c832a2bf72bfdb579704eb47c8d86316cec06
- SHA512
  
  b93693967bd9a8599611eb0917db564695f25824d8b6784799ae3e956699684db4c23eb0ac19ab5f432de73f23106698fcb581431c64992e95866e6c5f6f8c8f
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlDq:V6a+pOtEvwDpjvDY
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2