b4152dc3940a30b8ca1c0a445985bc9b9e1feafbe4d9ccd9e03a0b968cc97b1d | Triage

Sharing

General

Target

2024-10-10_ff25b355f57257ef1e4bbd2b2d6a4bf3_cryptolocker
Size

33KB
Sample

241010-ghp42avbpk
MD5

ff25b355f57257ef1e4bbd2b2d6a4bf3
SHA1

6e55265da61b805a65bfabf36b66282ad3b1b5f0
SHA256

b4152dc3940a30b8ca1c0a445985bc9b9e1feafbe4d9ccd9e03a0b968cc97b1d
SHA512

bb6f0cb3941510a1e2fd9cb0976575d1a3595dbc4c1f920a6c8085084ef9a1f458a2d7c15e253c5fe70703b26cd1b1031ead57d6806cbf5046d6efea5a50630d
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdoU:bAvJCYOOvbRPDEgXRcJ5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_ff25b355f57257ef1e4bbd2b2d6a4bf3_cryptolocker
- Size
  
  33KB
- MD5
  
  ff25b355f57257ef1e4bbd2b2d6a4bf3
- SHA1
  
  6e55265da61b805a65bfabf36b66282ad3b1b5f0
- SHA256
  
  b4152dc3940a30b8ca1c0a445985bc9b9e1feafbe4d9ccd9e03a0b968cc97b1d
- SHA512
  
  bb6f0cb3941510a1e2fd9cb0976575d1a3595dbc4c1f920a6c8085084ef9a1f458a2d7c15e253c5fe70703b26cd1b1031ead57d6806cbf5046d6efea5a50630d
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdoU:bAvJCYOOvbRPDEgXRcJ5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2