87b8d69e335b4c6d9cc170e92ee73bd3120617e59886eac88b5f457fca7a08c2 | Triage

Sharing

General

Target

20240521bdaf33063061abd98c923be2067a65f2cryptolocker.exe
Size

64KB
Sample

240522-xhzw8scg58
MD5

bdaf33063061abd98c923be2067a65f2
SHA1

f2a775f982f4b76e38d1bde8e169b92d84850129
SHA256

87b8d69e335b4c6d9cc170e92ee73bd3120617e59886eac88b5f457fca7a08c2
SHA512

7cfee482b74c22885f59645776d411a803c9d3a84d2ad638b91ae5cf6dd164f96b9f055728ff8c3f275f3d950eb7667b1ba0877de9f8ba03a673492cce885217
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIzYf:TCjsIOtEvwDpj5HE/OUHnSMo

Score

7^/10

Malware Config

Targets

- Target
  
  20240521bdaf33063061abd98c923be2067a65f2cryptolocker.exe
- Size
  
  64KB
- MD5
  
  bdaf33063061abd98c923be2067a65f2
- SHA1
  
  f2a775f982f4b76e38d1bde8e169b92d84850129
- SHA256
  
  87b8d69e335b4c6d9cc170e92ee73bd3120617e59886eac88b5f457fca7a08c2
- SHA512
  
  7cfee482b74c22885f59645776d411a803c9d3a84d2ad638b91ae5cf6dd164f96b9f055728ff8c3f275f3d950eb7667b1ba0877de9f8ba03a673492cce885217
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIzYf:TCjsIOtEvwDpj5HE/OUHnSMo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2