a452fce86846e8d61baeb9dfd232c1bb2ca9beaead40d345bae831d46929984d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-29_6921bb393fcf7f61d900b5b743bb1e80_cryptolocker
Size

57KB
Sample

240929-bt5e7svbmq
MD5

6921bb393fcf7f61d900b5b743bb1e80
SHA1

0f47a6769dc751cc2627a52f2a299bd0d92ff179
SHA256

a452fce86846e8d61baeb9dfd232c1bb2ca9beaead40d345bae831d46929984d
SHA512

80c1e3e8e6590d64e3cff55688d4ffbbb913b8219bcbc791b64fb94f522e9487eae88cd838bbac91c5c4f77840099c3269b985a24139d941fe5523d91427fc05
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EM0:TCjsIOtEvwDpj5HE/OUHnSM7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-29_6921bb393fcf7f61d900b5b743bb1e80_cryptolocker
- Size
  
  57KB
- MD5
  
  6921bb393fcf7f61d900b5b743bb1e80
- SHA1
  
  0f47a6769dc751cc2627a52f2a299bd0d92ff179
- SHA256
  
  a452fce86846e8d61baeb9dfd232c1bb2ca9beaead40d345bae831d46929984d
- SHA512
  
  80c1e3e8e6590d64e3cff55688d4ffbbb913b8219bcbc791b64fb94f522e9487eae88cd838bbac91c5c4f77840099c3269b985a24139d941fe5523d91427fc05
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EM0:TCjsIOtEvwDpj5HE/OUHnSM7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2