a8f3c06ef40ee3e35c5814b382d6702c9cc938cb33bc6173ea59cfce42e9ea14 | Triage

Sharing

General

Target

2024041462266b287851b7a2dd81177e234208edcryptolocker.exe
Size

62KB
Sample

240415-vy3lysbh64
MD5

62266b287851b7a2dd81177e234208ed
SHA1

2f3e313c2d2c17966724fcb65189632ad721c734
SHA256

a8f3c06ef40ee3e35c5814b382d6702c9cc938cb33bc6173ea59cfce42e9ea14
SHA512

08d12f8e9889bdc2c3c2bcd0df890abd972b12d22ad0eeec1fa12cc3200bdbbe6919e2c54514d3fb86da26e93b814281dc9843a50b3a6a6b43d98882c8cc798a
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIx:TCjsIOtEvwDpj5HE/OUHnSM/

Score

7^/10

Malware Config

Targets

- Target
  
  2024041462266b287851b7a2dd81177e234208edcryptolocker.exe
- Size
  
  62KB
- MD5
  
  62266b287851b7a2dd81177e234208ed
- SHA1
  
  2f3e313c2d2c17966724fcb65189632ad721c734
- SHA256
  
  a8f3c06ef40ee3e35c5814b382d6702c9cc938cb33bc6173ea59cfce42e9ea14
- SHA512
  
  08d12f8e9889bdc2c3c2bcd0df890abd972b12d22ad0eeec1fa12cc3200bdbbe6919e2c54514d3fb86da26e93b814281dc9843a50b3a6a6b43d98882c8cc798a
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIx:TCjsIOtEvwDpj5HE/OUHnSM/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2