5dec6d51bcd24e36ed44b70184034611355bcc8d3544be336a7b303156c49126 | Triage

Sharing

General

Target

2024-10-09_fbe89883a8e3a7edb2c3138db6ba974b_cryptolocker
Size

49KB
Sample

241009-fm8w9szglm
MD5

fbe89883a8e3a7edb2c3138db6ba974b
SHA1

f14030f21fc424cc9fd88c328eae9fc45649af25
SHA256

5dec6d51bcd24e36ed44b70184034611355bcc8d3544be336a7b303156c49126
SHA512

e33975af06666e02829a344124050a131dc11c53f114187c284d51c6341d7a5a5c7d2ba1b7247109d6f39b17102c5a4258729c65aa3f531c81000a32dc3abb9c
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITXx:26Q0ElP6G+gBQMOtEvwDpjgWMl7TXx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_fbe89883a8e3a7edb2c3138db6ba974b_cryptolocker
- Size
  
  49KB
- MD5
  
  fbe89883a8e3a7edb2c3138db6ba974b
- SHA1
  
  f14030f21fc424cc9fd88c328eae9fc45649af25
- SHA256
  
  5dec6d51bcd24e36ed44b70184034611355bcc8d3544be336a7b303156c49126
- SHA512
  
  e33975af06666e02829a344124050a131dc11c53f114187c284d51c6341d7a5a5c7d2ba1b7247109d6f39b17102c5a4258729c65aa3f531c81000a32dc3abb9c
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITXx:26Q0ElP6G+gBQMOtEvwDpjgWMl7TXx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2