1fb76bece0a36beac18ef9af8fb70cf6b4ae0c265807efc2bd6d8f9a40c37e1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-01_a0729cafc4b12b1a770307e6d83d94d2_cryptolocker
Size

65KB
Sample

241001-hgxm6azcpe
MD5

a0729cafc4b12b1a770307e6d83d94d2
SHA1

841e0f27ced363817b6250f426fdaad511954d0c
SHA256

1fb76bece0a36beac18ef9af8fb70cf6b4ae0c265807efc2bd6d8f9a40c37e1a
SHA512

ba9240ac5309af87a23aa30478cf5cd6ac2416369ef46240b35fce86a7736f62ca3f0c40ddaa731e361e3d4f0cc3c19558d123407feee8c10f2272d8c5d3272d
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUft:i5nkFGMOtEvwDpjNbwQEI8UF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_a0729cafc4b12b1a770307e6d83d94d2_cryptolocker
- Size
  
  65KB
- MD5
  
  a0729cafc4b12b1a770307e6d83d94d2
- SHA1
  
  841e0f27ced363817b6250f426fdaad511954d0c
- SHA256
  
  1fb76bece0a36beac18ef9af8fb70cf6b4ae0c265807efc2bd6d8f9a40c37e1a
- SHA512
  
  ba9240ac5309af87a23aa30478cf5cd6ac2416369ef46240b35fce86a7736f62ca3f0c40ddaa731e361e3d4f0cc3c19558d123407feee8c10f2272d8c5d3272d
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUft:i5nkFGMOtEvwDpjNbwQEI8UF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2