e384365cb28886c9dc527e875eeae8ab64c598b922b62af28987f38ef91f49c4 | Triage

Sharing

General

Target

2024-10-15_939286fb8ffbbc3ae0d109231ae35ccc_cryptolocker
Size

46KB
Sample

241015-fbet2svgre
MD5

939286fb8ffbbc3ae0d109231ae35ccc
SHA1

0de1f8b02f3e718094c80a6b82658476fc718601
SHA256

e384365cb28886c9dc527e875eeae8ab64c598b922b62af28987f38ef91f49c4
SHA512

5e441bc50b4f80beb4f87fa4aa123506298ecb640e27644ab854f919d159b5a67bd8fe9f6dac0488b2c75cb96b7a340d84ed68b38e1ad791e15f2ccd224cd465
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9Hkl:X6QFElP6n+gJQMOtEvwDpjBmzDkWDtE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-15_939286fb8ffbbc3ae0d109231ae35ccc_cryptolocker
- Size
  
  46KB
- MD5
  
  939286fb8ffbbc3ae0d109231ae35ccc
- SHA1
  
  0de1f8b02f3e718094c80a6b82658476fc718601
- SHA256
  
  e384365cb28886c9dc527e875eeae8ab64c598b922b62af28987f38ef91f49c4
- SHA512
  
  5e441bc50b4f80beb4f87fa4aa123506298ecb640e27644ab854f919d159b5a67bd8fe9f6dac0488b2c75cb96b7a340d84ed68b38e1ad791e15f2ccd224cd465
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9Hkl:X6QFElP6n+gJQMOtEvwDpjBmzDkWDtE
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2