bf28df29ae2f93e2b50e2a1d8a85b5c107958595fef2e95ed53b0af172d4bb3a | Triage

Sharing

General

Target

2024-11-02_0a66a4327d5b02afb9c69a7ef413f517_cryptolocker
Size

31KB
Sample

241102-g5v9kazeje
MD5

0a66a4327d5b02afb9c69a7ef413f517
SHA1

a26e496e41e9b2066f398849e6592ccab3b76e4e
SHA256

bf28df29ae2f93e2b50e2a1d8a85b5c107958595fef2e95ed53b0af172d4bb3a
SHA512

dbb7b35f4784e544fb22113afc947d5f1dbffcf0f2092b15a0add24104751d99e0bb68e1cd70789a90250298c1769f727640b6eb762cfdc1e22b2c9685190f0f
SSDEEP

768:I6LsoEEeegiZPvEhHSG+gbIBrtOOtEvwDpj7J:I6QFElP6n+gs5MOtEvwDpjt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-02_0a66a4327d5b02afb9c69a7ef413f517_cryptolocker
- Size
  
  31KB
- MD5
  
  0a66a4327d5b02afb9c69a7ef413f517
- SHA1
  
  a26e496e41e9b2066f398849e6592ccab3b76e4e
- SHA256
  
  bf28df29ae2f93e2b50e2a1d8a85b5c107958595fef2e95ed53b0af172d4bb3a
- SHA512
  
  dbb7b35f4784e544fb22113afc947d5f1dbffcf0f2092b15a0add24104751d99e0bb68e1cd70789a90250298c1769f727640b6eb762cfdc1e22b2c9685190f0f
- SSDEEP
  
  768:I6LsoEEeegiZPvEhHSG+gbIBrtOOtEvwDpj7J:I6QFElP6n+gs5MOtEvwDpjt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2