80745f9c160943f582fea01cf375398ec1c7640fd4878d0ecf8f47973bee43b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_39998d2edd8f1758bad32d8e0ea18956_cryptolocker
Size

38KB
Sample

241018-e3dkmaxclg
MD5

39998d2edd8f1758bad32d8e0ea18956
SHA1

ae9b1cfe39233ea8b5e1e15a9df1bee3d8c3b4c9
SHA256

80745f9c160943f582fea01cf375398ec1c7640fd4878d0ecf8f47973bee43b7
SHA512

ce5f4c27f18157803033fbd83d9922945eecdf8b1cba540e87e74daf1aa890ac9c07338aed92f52e068e0cad572cee0ffb7480cdb8e57ce40f73812b6d379709
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaacQsdRLIH:X6QFElP6n+gJQMOtEvwDpjBsQpH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_39998d2edd8f1758bad32d8e0ea18956_cryptolocker
- Size
  
  38KB
- MD5
  
  39998d2edd8f1758bad32d8e0ea18956
- SHA1
  
  ae9b1cfe39233ea8b5e1e15a9df1bee3d8c3b4c9
- SHA256
  
  80745f9c160943f582fea01cf375398ec1c7640fd4878d0ecf8f47973bee43b7
- SHA512
  
  ce5f4c27f18157803033fbd83d9922945eecdf8b1cba540e87e74daf1aa890ac9c07338aed92f52e068e0cad572cee0ffb7480cdb8e57ce40f73812b6d379709
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaacQsdRLIH:X6QFElP6n+gJQMOtEvwDpjBsQpH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2