eb8345c3218906d8f9d17865bbf5de2e4c0a2b1b3f0e787eb10996fa354213ff | Triage

Sharing

General

Target

2024-10-18_5baa374881bd0cb535f5eab02f07f441_cryptolocker
Size

57KB
Sample

241018-eayp4ayanp
MD5

5baa374881bd0cb535f5eab02f07f441
SHA1

bc6636480030052dab97eadb5b5651fc7cc05c22
SHA256

eb8345c3218906d8f9d17865bbf5de2e4c0a2b1b3f0e787eb10996fa354213ff
SHA512

789136f1f02bddbd8d1646bfbe7dd35a7c8a8bb4807efa8faea2626df7fcb271f9d7ee2a56101d801e00011c118719cceb34cad4fada69fd89e1af8043f3dc50
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eUuS:6j+1NMOtEvwDpjr8oxExe4

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_5baa374881bd0cb535f5eab02f07f441_cryptolocker
- Size
  
  57KB
- MD5
  
  5baa374881bd0cb535f5eab02f07f441
- SHA1
  
  bc6636480030052dab97eadb5b5651fc7cc05c22
- SHA256
  
  eb8345c3218906d8f9d17865bbf5de2e4c0a2b1b3f0e787eb10996fa354213ff
- SHA512
  
  789136f1f02bddbd8d1646bfbe7dd35a7c8a8bb4807efa8faea2626df7fcb271f9d7ee2a56101d801e00011c118719cceb34cad4fada69fd89e1af8043f3dc50
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/eUuS:6j+1NMOtEvwDpjr8oxExe4
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2