dbdc62e79a3a5a061739573a18819f09efe55484773aee884feb8349b83c4b9a | Triage

Sharing

General

Target

20240521dd46f1ef2a469ebedc8ba365559a1bd3cryptolocker.exe
Size

64KB
Sample

240522-xqsg5ada94
MD5

dd46f1ef2a469ebedc8ba365559a1bd3
SHA1

44cff1885b3f35d860fd4f375985aff62001e454
SHA256

dbdc62e79a3a5a061739573a18819f09efe55484773aee884feb8349b83c4b9a
SHA512

aa79e513e29f1f0cb3e2aa801a7353f7305d6f7999d3c25788f07952e3517ac394fcdd06a91c9ce33066b58758fb502cd66e24347c759b2569697e38140a3e00
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiv:BbdDmjr+OtEvwDpjM8a

Score

7^/10

Malware Config

Targets

- Target
  
  20240521dd46f1ef2a469ebedc8ba365559a1bd3cryptolocker.exe
- Size
  
  64KB
- MD5
  
  dd46f1ef2a469ebedc8ba365559a1bd3
- SHA1
  
  44cff1885b3f35d860fd4f375985aff62001e454
- SHA256
  
  dbdc62e79a3a5a061739573a18819f09efe55484773aee884feb8349b83c4b9a
- SHA512
  
  aa79e513e29f1f0cb3e2aa801a7353f7305d6f7999d3c25788f07952e3517ac394fcdd06a91c9ce33066b58758fb502cd66e24347c759b2569697e38140a3e00
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiv:BbdDmjr+OtEvwDpjM8a
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2