5f3a71059f9be44be037ab8380f1c79e2907a7d1b27db52c3512dd590a2f78b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_2e7aa955ea4f1ca08993e266ae917ae8_cryptolocker
Size

31KB
Sample

241017-twstasxeql
MD5

2e7aa955ea4f1ca08993e266ae917ae8
SHA1

00eda96a38e58f93ef1e2ee7030bba57a3d7e993
SHA256

5f3a71059f9be44be037ab8380f1c79e2907a7d1b27db52c3512dd590a2f78b3
SHA512

c8bcf307618571101fc67551beb583dc28c858fc08611455bce07cfe39b6cd09fde53a2f2a307e9ad43cc374823d73da72aa1ade06a37c664595aec3162b2ed0
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wc:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_2e7aa955ea4f1ca08993e266ae917ae8_cryptolocker
- Size
  
  31KB
- MD5
  
  2e7aa955ea4f1ca08993e266ae917ae8
- SHA1
  
  00eda96a38e58f93ef1e2ee7030bba57a3d7e993
- SHA256
  
  5f3a71059f9be44be037ab8380f1c79e2907a7d1b27db52c3512dd590a2f78b3
- SHA512
  
  c8bcf307618571101fc67551beb583dc28c858fc08611455bce07cfe39b6cd09fde53a2f2a307e9ad43cc374823d73da72aa1ade06a37c664595aec3162b2ed0
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wc:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2