d892cb30333ebf049f82f4098799725a058a7f33651b71640cf507a5814d10b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_b21436b3bd84e291ce5db86ade85c617_cryptolocker
Size

40KB
Sample

241013-bkf19a1flc
MD5

b21436b3bd84e291ce5db86ade85c617
SHA1

3c0625b3c79c3db6cf487a6e1d71591fe4235c56
SHA256

d892cb30333ebf049f82f4098799725a058a7f33651b71640cf507a5814d10b2
SHA512

80473b9a9dfeee01f64ef0d9fcd40eaaaaa0e4e71ef664b53955ae8e7012fc4a72892c0f5ddb49c6e964ec4fceb546cbb4f1919ff5de926b3a52bdbb1fb0845a
SSDEEP

768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qK:fT+hsMQMOtEvwDpjoIHB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_b21436b3bd84e291ce5db86ade85c617_cryptolocker
- Size
  
  40KB
- MD5
  
  b21436b3bd84e291ce5db86ade85c617
- SHA1
  
  3c0625b3c79c3db6cf487a6e1d71591fe4235c56
- SHA256
  
  d892cb30333ebf049f82f4098799725a058a7f33651b71640cf507a5814d10b2
- SHA512
  
  80473b9a9dfeee01f64ef0d9fcd40eaaaaa0e4e71ef664b53955ae8e7012fc4a72892c0f5ddb49c6e964ec4fceb546cbb4f1919ff5de926b3a52bdbb1fb0845a
- SSDEEP
  
  768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qK:fT+hsMQMOtEvwDpjoIHB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2