8a4eb9f5f25b974981d2b162465bb39d2f7da24a6e1e24f771337e5c54d1b5a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-01_9bd45be7350ecd64c0ab447e7e39f167_cryptolocker
Size

31KB
Sample

241001-gbjcxatapj
MD5

9bd45be7350ecd64c0ab447e7e39f167
SHA1

1f282da7aa40f43f111e4292c4a29926bcab9282
SHA256

8a4eb9f5f25b974981d2b162465bb39d2f7da24a6e1e24f771337e5c54d1b5a7
SHA512

d30aa0405bc9f422982b5b4b422a9735b2a8b83873950923820d8d5cf12b4771a4ceb51e9a742bcbf35319c165ed42ee024c61e61be8bffc33e6387f4fe00dac
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfP:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_9bd45be7350ecd64c0ab447e7e39f167_cryptolocker
- Size
  
  31KB
- MD5
  
  9bd45be7350ecd64c0ab447e7e39f167
- SHA1
  
  1f282da7aa40f43f111e4292c4a29926bcab9282
- SHA256
  
  8a4eb9f5f25b974981d2b162465bb39d2f7da24a6e1e24f771337e5c54d1b5a7
- SHA512
  
  d30aa0405bc9f422982b5b4b422a9735b2a8b83873950923820d8d5cf12b4771a4ceb51e9a742bcbf35319c165ed42ee024c61e61be8bffc33e6387f4fe00dac
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfP:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2