db1cdcb61ba1a59096d7f8992db2693281f7f0f9c0ed9ba65e509d6a517b346e | Triage

Sharing

General

Target

2024052125b3f0f2c796cd36c9da555434438be7cryptolocker.bin
Size

37KB
Sample

240522-x36waade99
MD5

25b3f0f2c796cd36c9da555434438be7
SHA1

c31d8c6b8919963687b8fd7588bdfd5909e0d9c3
SHA256

db1cdcb61ba1a59096d7f8992db2693281f7f0f9c0ed9ba65e509d6a517b346e
SHA512

cb79c5323f92701112a97b0a95f5df0ad8de63845a722dc42e81e526266da9eb3f44e74154437fc9f42f03815f94119ca2343ddf40de3500acc7dba8518d179b
SSDEEP

768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qo:fT+hsMQMOtEvwDpjoIHX

Score

7^/10

Malware Config

Targets

- Target
  
  2024052125b3f0f2c796cd36c9da555434438be7cryptolocker.bin
- Size
  
  37KB
- MD5
  
  25b3f0f2c796cd36c9da555434438be7
- SHA1
  
  c31d8c6b8919963687b8fd7588bdfd5909e0d9c3
- SHA256
  
  db1cdcb61ba1a59096d7f8992db2693281f7f0f9c0ed9ba65e509d6a517b346e
- SHA512
  
  cb79c5323f92701112a97b0a95f5df0ad8de63845a722dc42e81e526266da9eb3f44e74154437fc9f42f03815f94119ca2343ddf40de3500acc7dba8518d179b
- SSDEEP
  
  768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qo:fT+hsMQMOtEvwDpjoIHX
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2