5ffea9954bb871a8d51bd3b16e8c39ea4a9ed9bf9b95c80a43f26509d2bbc13b | Triage

Sharing

General

Target

2024-10-01_d087290b803f84c441d53da53b0bfc01_cryptolocker
Size

44KB
Sample

241001-ephmestfmb
MD5

d087290b803f84c441d53da53b0bfc01
SHA1

94fb2f5da029dc60e87ea9400cc0c49518d98cc9
SHA256

5ffea9954bb871a8d51bd3b16e8c39ea4a9ed9bf9b95c80a43f26509d2bbc13b
SHA512

f10a3d7f75b1980fa7a752b7fe13c978f3025a27531ce451853d0fd5d5a2f3c5ac322e7616aab87830ce86e2a8c1019e11d7b447466931a1e8280fa161e97267
SSDEEP

384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI/:XS5nQJ24LR1bytOOtEvwDpjNbf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_d087290b803f84c441d53da53b0bfc01_cryptolocker
- Size
  
  44KB
- MD5
  
  d087290b803f84c441d53da53b0bfc01
- SHA1
  
  94fb2f5da029dc60e87ea9400cc0c49518d98cc9
- SHA256
  
  5ffea9954bb871a8d51bd3b16e8c39ea4a9ed9bf9b95c80a43f26509d2bbc13b
- SHA512
  
  f10a3d7f75b1980fa7a752b7fe13c978f3025a27531ce451853d0fd5d5a2f3c5ac322e7616aab87830ce86e2a8c1019e11d7b447466931a1e8280fa161e97267
- SSDEEP
  
  384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI/:XS5nQJ24LR1bytOOtEvwDpjNbf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2