4fada99f7a31a1efa009cdf45ba821e0b72d39da487f41e28300a2b7e2b5c7bf | Triage

Sharing

General

Target

2024-10-18_bf2dd97c1eec1669d94ef6e4bbb89629_cryptolocker
Size

51KB
Sample

241018-jznnmsyejq
MD5

bf2dd97c1eec1669d94ef6e4bbb89629
SHA1

f2f7f895fd538895d8bf1c212874aae4b65f9be6
SHA256

4fada99f7a31a1efa009cdf45ba821e0b72d39da487f41e28300a2b7e2b5c7bf
SHA512

eb43123be9b4614ff643bb9848fffe70c911611bc31ffff79a094c2d43e8f9f552fd3f87b720120fc5de71318868847bb3c5e5263fe9f11cd473546de7b2aa7d
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQa2yfN:X6QFElP6n+gJBMOtEvwDpjBtE1y2yfN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_bf2dd97c1eec1669d94ef6e4bbb89629_cryptolocker
- Size
  
  51KB
- MD5
  
  bf2dd97c1eec1669d94ef6e4bbb89629
- SHA1
  
  f2f7f895fd538895d8bf1c212874aae4b65f9be6
- SHA256
  
  4fada99f7a31a1efa009cdf45ba821e0b72d39da487f41e28300a2b7e2b5c7bf
- SHA512
  
  eb43123be9b4614ff643bb9848fffe70c911611bc31ffff79a094c2d43e8f9f552fd3f87b720120fc5de71318868847bb3c5e5263fe9f11cd473546de7b2aa7d
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQa2yfN:X6QFElP6n+gJBMOtEvwDpjBtE1y2yfN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2