e4bd8eeb82a92ab6f7205906a6e11a556c1f5c90a0c897025f6c5f5a85e44e55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-06_4e3b839e241a9a3de03819bc609a38f5_cryptolocker
Size

42KB
Sample

241006-a5gmvascqh
MD5

4e3b839e241a9a3de03819bc609a38f5
SHA1

a6a8cb3ce24656935caa6276baea0cb6156f395c
SHA256

e4bd8eeb82a92ab6f7205906a6e11a556c1f5c90a0c897025f6c5f5a85e44e55
SHA512

d13be65147c53cc1f2e0b6cf5fdd2536627fe26c12edd381052d314016a56f187faae5020fc6b49ce0fac82b721a60faabd98ed1986220df3f463c34189e27a4
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxK:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_4e3b839e241a9a3de03819bc609a38f5_cryptolocker
- Size
  
  42KB
- MD5
  
  4e3b839e241a9a3de03819bc609a38f5
- SHA1
  
  a6a8cb3ce24656935caa6276baea0cb6156f395c
- SHA256
  
  e4bd8eeb82a92ab6f7205906a6e11a556c1f5c90a0c897025f6c5f5a85e44e55
- SHA512
  
  d13be65147c53cc1f2e0b6cf5fdd2536627fe26c12edd381052d314016a56f187faae5020fc6b49ce0fac82b721a60faabd98ed1986220df3f463c34189e27a4
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxK:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2