bc514ee2a1a0193e8f82ece22b1fb9add8b767c0f09daa41660d773d2a5af50a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_fe915d3df4c232ac4c96c50b404f7ebc_cryptolocker
Size

56KB
Sample

241013-envwcssenm
MD5

fe915d3df4c232ac4c96c50b404f7ebc
SHA1

4aaad8466462fa352172960556a92c5149e96cea
SHA256

bc514ee2a1a0193e8f82ece22b1fb9add8b767c0f09daa41660d773d2a5af50a
SHA512

c5daa6a9ff207d18ae1ff243926111e7650008a4500f3952210d10d2385d65e04b28d41a0fd839fdd67a953acb2abc9fa44d891b75b9200d971aa32c9ae3a60f
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpi:ZVxkGOtEvwDpjcu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_fe915d3df4c232ac4c96c50b404f7ebc_cryptolocker
- Size
  
  56KB
- MD5
  
  fe915d3df4c232ac4c96c50b404f7ebc
- SHA1
  
  4aaad8466462fa352172960556a92c5149e96cea
- SHA256
  
  bc514ee2a1a0193e8f82ece22b1fb9add8b767c0f09daa41660d773d2a5af50a
- SHA512
  
  c5daa6a9ff207d18ae1ff243926111e7650008a4500f3952210d10d2385d65e04b28d41a0fd839fdd67a953acb2abc9fa44d891b75b9200d971aa32c9ae3a60f
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpi:ZVxkGOtEvwDpjcu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2