44ffd216a954d7012d386e229da4b3d00ebbbbc7cfc43f6a64b9b29b7d62faf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-06_9a87f43bf24122920d55851f7b627c4c_cryptolocker
Size

37KB
Sample

241006-bfe86aybjm
MD5

9a87f43bf24122920d55851f7b627c4c
SHA1

d6a939242643380c2014559d9cd8c84fb0668bdf
SHA256

44ffd216a954d7012d386e229da4b3d00ebbbbc7cfc43f6a64b9b29b7d62faf0
SHA512

06ab81fecdb75cc924fb99a525934aadfef0a586149abf0144fbd3a9df3ca958100faaaa13176f9d83a59665dd1cb7e53d0dd41fc3d8fd14077e074df165095f
SSDEEP

768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlU7ht:b/pYayGig5HjS3ult

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_9a87f43bf24122920d55851f7b627c4c_cryptolocker
- Size
  
  37KB
- MD5
  
  9a87f43bf24122920d55851f7b627c4c
- SHA1
  
  d6a939242643380c2014559d9cd8c84fb0668bdf
- SHA256
  
  44ffd216a954d7012d386e229da4b3d00ebbbbc7cfc43f6a64b9b29b7d62faf0
- SHA512
  
  06ab81fecdb75cc924fb99a525934aadfef0a586149abf0144fbd3a9df3ca958100faaaa13176f9d83a59665dd1cb7e53d0dd41fc3d8fd14077e074df165095f
- SSDEEP
  
  768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlU7ht:b/pYayGig5HjS3ult
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2