c08d27c297b71056b2b1dab6d40a41706b2fe679b088a7ac617514c96e153585 | Triage

Sharing

General

Target

202405210c358f89cefb7d6c2517136edc0a3e75cryptolocker.bin
Size

46KB
Sample

240522-xqek9sda77
MD5

0c358f89cefb7d6c2517136edc0a3e75
SHA1

51caa37161e3c627dc153aa3c89fd47057621b25
SHA256

c08d27c297b71056b2b1dab6d40a41706b2fe679b088a7ac617514c96e153585
SHA512

1e2d8c877b103b2ba582a98d00f221dc230dddb836a38b42654126c69141d88c61d0615966a1d9841aa3b7c7cfe10d89ef6a3f8d9b40b27b61855f2c4de5a841
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJU:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3x

Score

7^/10

Malware Config

Targets

- Target
  
  202405210c358f89cefb7d6c2517136edc0a3e75cryptolocker.bin
- Size
  
  46KB
- MD5
  
  0c358f89cefb7d6c2517136edc0a3e75
- SHA1
  
  51caa37161e3c627dc153aa3c89fd47057621b25
- SHA256
  
  c08d27c297b71056b2b1dab6d40a41706b2fe679b088a7ac617514c96e153585
- SHA512
  
  1e2d8c877b103b2ba582a98d00f221dc230dddb836a38b42654126c69141d88c61d0615966a1d9841aa3b7c7cfe10d89ef6a3f8d9b40b27b61855f2c4de5a841
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJU:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3x
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2