9f445067a4dc7e5c0b5d87836d89fa58042ad8926b75bcf267ba6fad66b3c30a | Triage

Sharing

General

Target

202405210523062680635ea4d87cbb3184ce8afacryptolocker.bin
Size

45KB
Sample

240522-xsjb8sda6w
MD5

0523062680635ea4d87cbb3184ce8afa
SHA1

131d68a5eb404dc6875eb304402c651f97398a32
SHA256

9f445067a4dc7e5c0b5d87836d89fa58042ad8926b75bcf267ba6fad66b3c30a
SHA512

36906062af69605ec77fc2ddce5918893ad451bd7ab2ce284adf7b476d7c85f4fc5cf858b1d565c33e2aeccbf524be0ee9d191beefab8c9e60eafc3369bc3438
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9L:X6QFElP6n+gJQMOtEvwDpjBmzDkWDB

Score

7^/10

Malware Config

Targets

- Target
  
  202405210523062680635ea4d87cbb3184ce8afacryptolocker.bin
- Size
  
  45KB
- MD5
  
  0523062680635ea4d87cbb3184ce8afa
- SHA1
  
  131d68a5eb404dc6875eb304402c651f97398a32
- SHA256
  
  9f445067a4dc7e5c0b5d87836d89fa58042ad8926b75bcf267ba6fad66b3c30a
- SHA512
  
  36906062af69605ec77fc2ddce5918893ad451bd7ab2ce284adf7b476d7c85f4fc5cf858b1d565c33e2aeccbf524be0ee9d191beefab8c9e60eafc3369bc3438
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9L:X6QFElP6n+gJQMOtEvwDpjBmzDkWDB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2