5d181e6dd4f3296c1e498bb92613eba7618da29c4c461c1e86b1b3150e9183cb | Triage

Sharing

General

Target

2024-10-05_bdd5a6188f6132a41a23c83f9d3e534a_cryptolocker
Size

47KB
Sample

241005-ge44sasglh
MD5

bdd5a6188f6132a41a23c83f9d3e534a
SHA1

5030f76dc6d6054487b4de580f79b34d053cef19
SHA256

5d181e6dd4f3296c1e498bb92613eba7618da29c4c461c1e86b1b3150e9183cb
SHA512

a263d57190155e5a2cf749b46f656e58e47a1af9c2547921da99cd56ab3b965c8a208c9bcad09e10500906b427388f64abe0f41f1e6417c88aeb0a1692776e21
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITi:26Q0ElP6G+gBQMOtEvwDpjgWMl7Ti

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-05_bdd5a6188f6132a41a23c83f9d3e534a_cryptolocker
- Size
  
  47KB
- MD5
  
  bdd5a6188f6132a41a23c83f9d3e534a
- SHA1
  
  5030f76dc6d6054487b4de580f79b34d053cef19
- SHA256
  
  5d181e6dd4f3296c1e498bb92613eba7618da29c4c461c1e86b1b3150e9183cb
- SHA512
  
  a263d57190155e5a2cf749b46f656e58e47a1af9c2547921da99cd56ab3b965c8a208c9bcad09e10500906b427388f64abe0f41f1e6417c88aeb0a1692776e21
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITi:26Q0ElP6G+gBQMOtEvwDpjgWMl7Ti
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2