8e959b1cdf1f952200c34b5e5c59996c278c0d89beb0aec0dfb88227169c2346 | Triage

Sharing

General

Target

2024-10-18_a5fb718290fa464ba7856df49616b4e1_cryptolocker
Size

40KB
Sample

241018-ejlf5awbpg
MD5

a5fb718290fa464ba7856df49616b4e1
SHA1

feb3ab9e34eb980a68da7145c3d61ccfd8f015c3
SHA256

8e959b1cdf1f952200c34b5e5c59996c278c0d89beb0aec0dfb88227169c2346
SHA512

0005dd895987b3ee2cc5aa9966f29e5afe5454d34777b66c5a7e1ce06fba034e8ba779d46537e3208fd29091f0359f33c7c52efa7b0bd6385166699ca26c0630
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0r:X6QFElP6n+gJQMOtEvwDpjBmzDU5r

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_a5fb718290fa464ba7856df49616b4e1_cryptolocker
- Size
  
  40KB
- MD5
  
  a5fb718290fa464ba7856df49616b4e1
- SHA1
  
  feb3ab9e34eb980a68da7145c3d61ccfd8f015c3
- SHA256
  
  8e959b1cdf1f952200c34b5e5c59996c278c0d89beb0aec0dfb88227169c2346
- SHA512
  
  0005dd895987b3ee2cc5aa9966f29e5afe5454d34777b66c5a7e1ce06fba034e8ba779d46537e3208fd29091f0359f33c7c52efa7b0bd6385166699ca26c0630
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0r:X6QFElP6n+gJQMOtEvwDpjBmzDU5r
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2