f6c021913201342fbeb88ae6242494541392995734dca641bc6bf0ba47872801 | Triage

Sharing

General

Target

2024-11-02_bfb51dc5702b9e40678b0a7e920ba22e_cryptolocker
Size

36KB
Sample

241102-g74nqazekd
MD5

bfb51dc5702b9e40678b0a7e920ba22e
SHA1

7e133820cdae50162710f41c807d08ac5ab02d2a
SHA256

f6c021913201342fbeb88ae6242494541392995734dca641bc6bf0ba47872801
SHA512

7f0e33ad810a28733d2aa39a34632483c048abec01ca8a90061ba88006470751c1c185c4660720e79a600697366e47b8d99ff2166d0dc51a3fd46029ad5b61d8
SSDEEP

768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6oTy4l:bc/y2lLRU6zA6cx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-02_bfb51dc5702b9e40678b0a7e920ba22e_cryptolocker
- Size
  
  36KB
- MD5
  
  bfb51dc5702b9e40678b0a7e920ba22e
- SHA1
  
  7e133820cdae50162710f41c807d08ac5ab02d2a
- SHA256
  
  f6c021913201342fbeb88ae6242494541392995734dca641bc6bf0ba47872801
- SHA512
  
  7f0e33ad810a28733d2aa39a34632483c048abec01ca8a90061ba88006470751c1c185c4660720e79a600697366e47b8d99ff2166d0dc51a3fd46029ad5b61d8
- SSDEEP
  
  768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6oTy4l:bc/y2lLRU6zA6cx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2