bf703cca141eca33bb727f7550bf64df3c8546861f8145a8bcdc84eaecf680fc | Triage

Sharing

General

Target

20240521c24f2116d42a9e3300512dcf163fb0c5cryptolocker.exe
Size

44KB
Sample

240522-xzm9rsdd77
MD5

c24f2116d42a9e3300512dcf163fb0c5
SHA1

c0d5bcad9a7c1a620860841aeb567f61f39cc884
SHA256

bf703cca141eca33bb727f7550bf64df3c8546861f8145a8bcdc84eaecf680fc
SHA512

262e3676b4ec9e6301d8537f23c480df9dd5d246b8595d67c7d821abf1c47f2d5d3129eb670b3ff2aef2908521e1679293ad4c5579353f8228116efbccd15c78
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpEui0U3Nf+b:bm74zYcgT/Ekn0ryfjLur

Score

7^/10

Malware Config

Targets

- Target
  
  20240521c24f2116d42a9e3300512dcf163fb0c5cryptolocker.exe
- Size
  
  44KB
- MD5
  
  c24f2116d42a9e3300512dcf163fb0c5
- SHA1
  
  c0d5bcad9a7c1a620860841aeb567f61f39cc884
- SHA256
  
  bf703cca141eca33bb727f7550bf64df3c8546861f8145a8bcdc84eaecf680fc
- SHA512
  
  262e3676b4ec9e6301d8537f23c480df9dd5d246b8595d67c7d821abf1c47f2d5d3129eb670b3ff2aef2908521e1679293ad4c5579353f8228116efbccd15c78
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpEui0U3Nf+b:bm74zYcgT/Ekn0ryfjLur
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2