795ff648bd79eb6e4dedfbd2d284b87da95da664479196449ea4836896db6c56 | Triage

Sharing

General

Target

20240521b712f54d1843f7f4991b919594c74fd8cryptolocker.exe
Size

43KB
Sample

240522-xpp1lsch61
MD5

b712f54d1843f7f4991b919594c74fd8
SHA1

b1cab6f6a500c6f1a1ac15ec7b49f34f9b5b15a5
SHA256

795ff648bd79eb6e4dedfbd2d284b87da95da664479196449ea4836896db6c56
SHA512

7b8b09f5252c06511c3b5f1c2916210950a383784e3bfaa45707c61791ecb29e13b3d3cbdc9f5b6e889012fe8b7156e1c1700f420f6a50370d6273f249ac603d
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydC:bCDOw9aMDooc+vAyU

Score

7^/10

Malware Config

Targets

- Target
  
  20240521b712f54d1843f7f4991b919594c74fd8cryptolocker.exe
- Size
  
  43KB
- MD5
  
  b712f54d1843f7f4991b919594c74fd8
- SHA1
  
  b1cab6f6a500c6f1a1ac15ec7b49f34f9b5b15a5
- SHA256
  
  795ff648bd79eb6e4dedfbd2d284b87da95da664479196449ea4836896db6c56
- SHA512
  
  7b8b09f5252c06511c3b5f1c2916210950a383784e3bfaa45707c61791ecb29e13b3d3cbdc9f5b6e889012fe8b7156e1c1700f420f6a50370d6273f249ac603d
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydC:bCDOw9aMDooc+vAyU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2