d146165ce52fea93153aca3076c6f22ad4453a0908dda5e4302699cf6814a384 | Triage

Sharing

General

Target

2024-10-18_a4cabb31a365179071e1c8812289d502_cryptolocker
Size

31KB
Sample

241018-cbf6bszcle
MD5

a4cabb31a365179071e1c8812289d502
SHA1

78fe91a4c189be6994a0af76dd9e0938d063270f
SHA256

d146165ce52fea93153aca3076c6f22ad4453a0908dda5e4302699cf6814a384
SHA512

da1612bf6d5f24fa90c4066a96d03f94efe01927261ba93fcc9cd7f4da8d4449bfe3cfefc3bcf1da97fa43a6c3847a320803091962abac15b2c9c86e0d2cf2b5
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznUs2J:b/yC4GyNM01GuQMNXw2PSjMJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_a4cabb31a365179071e1c8812289d502_cryptolocker
- Size
  
  31KB
- MD5
  
  a4cabb31a365179071e1c8812289d502
- SHA1
  
  78fe91a4c189be6994a0af76dd9e0938d063270f
- SHA256
  
  d146165ce52fea93153aca3076c6f22ad4453a0908dda5e4302699cf6814a384
- SHA512
  
  da1612bf6d5f24fa90c4066a96d03f94efe01927261ba93fcc9cd7f4da8d4449bfe3cfefc3bcf1da97fa43a6c3847a320803091962abac15b2c9c86e0d2cf2b5
- SSDEEP
  
  384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznUs2J:b/yC4GyNM01GuQMNXw2PSjMJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2