e8c8a1de615418651be64c24f8f126d8e94e5700511c6af635302f56f3536c02 | Triage

Sharing

General

Target

2024-10-12_20b227bd524e84a3ae01e63a01cbf90d_cryptolocker
Size

5.5MB
Sample

241012-fgpansthnh
MD5

20b227bd524e84a3ae01e63a01cbf90d
SHA1

ac51bb815b96f55a44e7b047e4b450c41f0cb878
SHA256

e8c8a1de615418651be64c24f8f126d8e94e5700511c6af635302f56f3536c02
SHA512

30b05079d6e9def31161044085ecfdf4f1e1f167a01342737d77c367249313c7fde34825b9da465a6d770a9e0f37f23c5069f1af5fc69eec2ccda3575dabd684
SSDEEP

98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+UfK:otTvgz73XMpxDbcwYvt3sFa4OK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_20b227bd524e84a3ae01e63a01cbf90d_cryptolocker
- Size
  
  5.5MB
- MD5
  
  20b227bd524e84a3ae01e63a01cbf90d
- SHA1
  
  ac51bb815b96f55a44e7b047e4b450c41f0cb878
- SHA256
  
  e8c8a1de615418651be64c24f8f126d8e94e5700511c6af635302f56f3536c02
- SHA512
  
  30b05079d6e9def31161044085ecfdf4f1e1f167a01342737d77c367249313c7fde34825b9da465a6d770a9e0f37f23c5069f1af5fc69eec2ccda3575dabd684
- SSDEEP
  
  98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+UfK:otTvgz73XMpxDbcwYvt3sFa4OK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2