ac132145e5adeb02e6dfb3f8cf61eadf8acfe2104212cc5380f363685cb9e2fc | Triage

Sharing

General

Target

20240521524c61feeaae99750199ce8988d18e7ecryptolocker.exe
Size

45KB
Sample

240522-xpr5zach7s
MD5

524c61feeaae99750199ce8988d18e7e
SHA1

c9915cd169bb78c9db38f221280f9d98540d51ae
SHA256

ac132145e5adeb02e6dfb3f8cf61eadf8acfe2104212cc5380f363685cb9e2fc
SHA512

cdcc62b9b3b5f43e37647882e1ca31aaf2677fc1968371eca80aaf73387ad9bbca9ae654c7f1c16534fb7741fe6339ed005e8363b7cf35352303e8955fcaff79
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPh+q:P6QFElP6k+MRQMOtEvwDpjBQpVXK+q

Score

7^/10

Malware Config

Targets

- Target
  
  20240521524c61feeaae99750199ce8988d18e7ecryptolocker.exe
- Size
  
  45KB
- MD5
  
  524c61feeaae99750199ce8988d18e7e
- SHA1
  
  c9915cd169bb78c9db38f221280f9d98540d51ae
- SHA256
  
  ac132145e5adeb02e6dfb3f8cf61eadf8acfe2104212cc5380f363685cb9e2fc
- SHA512
  
  cdcc62b9b3b5f43e37647882e1ca31aaf2677fc1968371eca80aaf73387ad9bbca9ae654c7f1c16534fb7741fe6339ed005e8363b7cf35352303e8955fcaff79
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPh+q:P6QFElP6k+MRQMOtEvwDpjBQpVXK+q
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2