5b999837dc80e58d91df271bfce0dead0f92af299dcf062c29399e238eb717b4 | Triage

Sharing

General

Target

2024-07-25_7cdda9ba3ae4c39b39083d354214b5d1_cryptolocker
Size

392KB
Sample

240725-yjkz5sthka
MD5

7cdda9ba3ae4c39b39083d354214b5d1
SHA1

57d3123644c438e7743b01cbccf8072f25ac0988
SHA256

5b999837dc80e58d91df271bfce0dead0f92af299dcf062c29399e238eb717b4
SHA512

cfba224f3a5d48eddf1ee9a3dbd655e39fd0929afac029ae3a7164388c2002b7c92d0bbc87321998e42572d25843f64331d70ac0e41e863411bea36d79a9c8c7
SSDEEP

6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXS:nnOflT/ZFIjBz3xjTxynGUOUhXS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-25_7cdda9ba3ae4c39b39083d354214b5d1_cryptolocker
- Size
  
  392KB
- MD5
  
  7cdda9ba3ae4c39b39083d354214b5d1
- SHA1
  
  57d3123644c438e7743b01cbccf8072f25ac0988
- SHA256
  
  5b999837dc80e58d91df271bfce0dead0f92af299dcf062c29399e238eb717b4
- SHA512
  
  cfba224f3a5d48eddf1ee9a3dbd655e39fd0929afac029ae3a7164388c2002b7c92d0bbc87321998e42572d25843f64331d70ac0e41e863411bea36d79a9c8c7
- SSDEEP
  
  6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXS:nnOflT/ZFIjBz3xjTxynGUOUhXS
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2