a08527f653acf5a6fbf5f19cb3f6eed3a62e2de34b168afcc67542874c4fb93d | Triage

Sharing

General

Target

20240521668c0bf4b7f161769921c15317db6b65cryptolocker.exe
Size

38KB
Sample

240522-x92vxadh62
MD5

668c0bf4b7f161769921c15317db6b65
SHA1

a0cc35f8074a8bf0d5cfcbaec2c4de403ef9d18b
SHA256

a08527f653acf5a6fbf5f19cb3f6eed3a62e2de34b168afcc67542874c4fb93d
SHA512

3a52ee7624478ae16eb65bd16b6899e79ffe5b02d4e0779dbe020afdbfd941e00818cc96e2467b8060cf8b38ee859165aa960a03de676c279a6a2a8270376e62
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZyS:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X4

Score

7^/10

Malware Config

Targets

- Target
  
  20240521668c0bf4b7f161769921c15317db6b65cryptolocker.exe
- Size
  
  38KB
- MD5
  
  668c0bf4b7f161769921c15317db6b65
- SHA1
  
  a0cc35f8074a8bf0d5cfcbaec2c4de403ef9d18b
- SHA256
  
  a08527f653acf5a6fbf5f19cb3f6eed3a62e2de34b168afcc67542874c4fb93d
- SHA512
  
  3a52ee7624478ae16eb65bd16b6899e79ffe5b02d4e0779dbe020afdbfd941e00818cc96e2467b8060cf8b38ee859165aa960a03de676c279a6a2a8270376e62
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZyS:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2