bc71fb734f0ee6bb3e248603edffc6a6a33e97e45d25f4b941fa8e0fda3a1eec | Triage

Sharing

General

Target

2024-11-21_b788d9d00817d16b876d43066597d613_cryptolocker
Size

46KB
Sample

241121-jh2tyazang
MD5

b788d9d00817d16b876d43066597d613
SHA1

b5566ddbbfb08b2807004a213e3955a9d6f01b7a
SHA256

bc71fb734f0ee6bb3e248603edffc6a6a33e97e45d25f4b941fa8e0fda3a1eec
SHA512

a9db2f49a4edf3c12aa23885e4d62647664c3a8ae5b418709b28e5ac947ff025c3ec607dbfab29ab2f3880f62b8c748ac1067180a912403744adc0c25bb86772
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9Hke0V:X6QFElP6n+gJQMOtEvwDpjBmzDkWDtA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_b788d9d00817d16b876d43066597d613_cryptolocker
- Size
  
  46KB
- MD5
  
  b788d9d00817d16b876d43066597d613
- SHA1
  
  b5566ddbbfb08b2807004a213e3955a9d6f01b7a
- SHA256
  
  bc71fb734f0ee6bb3e248603edffc6a6a33e97e45d25f4b941fa8e0fda3a1eec
- SHA512
  
  a9db2f49a4edf3c12aa23885e4d62647664c3a8ae5b418709b28e5ac947ff025c3ec607dbfab29ab2f3880f62b8c748ac1067180a912403744adc0c25bb86772
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9Hke0V:X6QFElP6n+gJQMOtEvwDpjBmzDkWDtA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2