5c33140f2f9c8d416d4a07929aa909681fbbe1dd90603520edc105d1b0c0aec1 | Triage

Sharing

General

Target

2024-07-23_c4c64217fbbb04fdceb815bf9513e010_cryptolocker
Size

30KB
Sample

240723-x4rgzswfrd
MD5

c4c64217fbbb04fdceb815bf9513e010
SHA1

642373d29efcf3db5d2ea7240b7fc1bcec94c6f5
SHA256

5c33140f2f9c8d416d4a07929aa909681fbbe1dd90603520edc105d1b0c0aec1
SHA512

0488c3a6a429bb27b50bd3309092b7ee97a6535eb3292894090d834c92df1944f4584bfd3fd2990c4efd75953bf6ab89f36ba0890b02e6b16742329aa1802395
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf1C:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-23_c4c64217fbbb04fdceb815bf9513e010_cryptolocker
- Size
  
  30KB
- MD5
  
  c4c64217fbbb04fdceb815bf9513e010
- SHA1
  
  642373d29efcf3db5d2ea7240b7fc1bcec94c6f5
- SHA256
  
  5c33140f2f9c8d416d4a07929aa909681fbbe1dd90603520edc105d1b0c0aec1
- SHA512
  
  0488c3a6a429bb27b50bd3309092b7ee97a6535eb3292894090d834c92df1944f4584bfd3fd2990c4efd75953bf6ab89f36ba0890b02e6b16742329aa1802395
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf1C:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2