f8e7ac6d6bf1d8d866f39cf622530fc19667972d009437784a5214f6ed3fe855 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_2db49cc9718ad69f64a6da973a63e2b1_cryptolocker
Size

27KB
Sample

241009-x4r4hswfpb
MD5

2db49cc9718ad69f64a6da973a63e2b1
SHA1

df04ed26e762f685126613bd9916d8f1bf20047a
SHA256

f8e7ac6d6bf1d8d866f39cf622530fc19667972d009437784a5214f6ed3fe855
SHA512

cb8e33f6961c7b718a0ddea4eb4e08dba790d55c468e665a92a03ed626e0f68b965ef43de455ad0cf62e8c56e7a231ddfa38a0bc5bb08f5cbdf04a3a1ea30c3d
SSDEEP

384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJm:bA74zYcgT/Ekd0ryfjQRSU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_2db49cc9718ad69f64a6da973a63e2b1_cryptolocker
- Size
  
  27KB
- MD5
  
  2db49cc9718ad69f64a6da973a63e2b1
- SHA1
  
  df04ed26e762f685126613bd9916d8f1bf20047a
- SHA256
  
  f8e7ac6d6bf1d8d866f39cf622530fc19667972d009437784a5214f6ed3fe855
- SHA512
  
  cb8e33f6961c7b718a0ddea4eb4e08dba790d55c468e665a92a03ed626e0f68b965ef43de455ad0cf62e8c56e7a231ddfa38a0bc5bb08f5cbdf04a3a1ea30c3d
- SSDEEP
  
  384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJm:bA74zYcgT/Ekd0ryfjQRSU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2