539403e9436be76660d24864148f33496553e02b30effc4a4ff31d796962a946 | Triage

Sharing

General

Target

20240521e10b73267a88f0c40a5bf5bc88141e40cryptolocker.exe
Size

97KB
Sample

240522-x6c3dadf41
MD5

e10b73267a88f0c40a5bf5bc88141e40
SHA1

d7c94a82e3ed3eb9dbacb84890b66c116b82505f
SHA256

539403e9436be76660d24864148f33496553e02b30effc4a4ff31d796962a946
SHA512

599d63882f59c2eac4be669dd2b857dc3c384be908b769f33ca910b0fd11aea373a2ccc85520387106fe3b1076d5eadd6b744068392c086d10861a8c3122a836
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0WG:V6a+pOtEvwDpjtzJ

Score

7^/10

Malware Config

Targets

- Target
  
  20240521e10b73267a88f0c40a5bf5bc88141e40cryptolocker.exe
- Size
  
  97KB
- MD5
  
  e10b73267a88f0c40a5bf5bc88141e40
- SHA1
  
  d7c94a82e3ed3eb9dbacb84890b66c116b82505f
- SHA256
  
  539403e9436be76660d24864148f33496553e02b30effc4a4ff31d796962a946
- SHA512
  
  599d63882f59c2eac4be669dd2b857dc3c384be908b769f33ca910b0fd11aea373a2ccc85520387106fe3b1076d5eadd6b744068392c086d10861a8c3122a836
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0WG:V6a+pOtEvwDpjtzJ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2