4af47140357bbf16cab6ac525e91cb7382bcddea90df949362fe8a17e4234ca2 | Triage

Sharing

General

Target

20240531f2ae740b00667c130ccb44fb55b7162ecryptolocker
Size

85KB
Sample

240531-qfmqkahh3x
MD5

f2ae740b00667c130ccb44fb55b7162e
SHA1

2e0fc0288188734bcc0950e75e6a54e1246a5e6d
SHA256

4af47140357bbf16cab6ac525e91cb7382bcddea90df949362fe8a17e4234ca2
SHA512

ecab08c7e0f90327a0e1ad11eb0b841cbe7075284571b2923a97f0aefddc928c7aaf732c52597fdab763669a78bde97cf890708deca0e330f455b55a68d599fb
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+v:TCjsIOtEvwDpj5HE/OUHnSMp

Score

7^/10

Malware Config

Targets

- Target
  
  20240531f2ae740b00667c130ccb44fb55b7162ecryptolocker
- Size
  
  85KB
- MD5
  
  f2ae740b00667c130ccb44fb55b7162e
- SHA1
  
  2e0fc0288188734bcc0950e75e6a54e1246a5e6d
- SHA256
  
  4af47140357bbf16cab6ac525e91cb7382bcddea90df949362fe8a17e4234ca2
- SHA512
  
  ecab08c7e0f90327a0e1ad11eb0b841cbe7075284571b2923a97f0aefddc928c7aaf732c52597fdab763669a78bde97cf890708deca0e330f455b55a68d599fb
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+v:TCjsIOtEvwDpj5HE/OUHnSMp
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2