3259dfcb92307e10e0a55631a6977468e494686ab262e94b1409ca7becfbb9db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

202404308d0d8d3e9bb5402ca915873fb47f5fddcryptolocker.exe
Size

64KB
Sample

240430-nw632abe5x
MD5

8d0d8d3e9bb5402ca915873fb47f5fdd
SHA1

0f83e11c43fba407979e5e0cb9d27be59a8a8b8c
SHA256

3259dfcb92307e10e0a55631a6977468e494686ab262e94b1409ca7becfbb9db
SHA512

a458f125bde91ee372f1dcbe17bb754be4b9f6022e6d02a9473d5e4b755b8b0d41b0dd3915a8b4d027a550d66d5fa1ab273b83286556ada1e14d44239df71804
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Cis:aq7tdgI2MyzNORQtOflIwoHNV2XBFV76

Score

7^/10

Malware Config

Targets

- Target
  
  202404308d0d8d3e9bb5402ca915873fb47f5fddcryptolocker.exe
- Size
  
  64KB
- MD5
  
  8d0d8d3e9bb5402ca915873fb47f5fdd
- SHA1
  
  0f83e11c43fba407979e5e0cb9d27be59a8a8b8c
- SHA256
  
  3259dfcb92307e10e0a55631a6977468e494686ab262e94b1409ca7becfbb9db
- SHA512
  
  a458f125bde91ee372f1dcbe17bb754be4b9f6022e6d02a9473d5e4b755b8b0d41b0dd3915a8b4d027a550d66d5fa1ab273b83286556ada1e14d44239df71804
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Cis:aq7tdgI2MyzNORQtOflIwoHNV2XBFV76
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2