c25d9b3623783cf4ec45e6616c9784d3191150a4ef34e3c7e6961f8fdf605e40 | Triage

Sharing

General

Target

2024-07-26_e55716284a21c7e7263b64f81b69ad94_cryptolocker
Size

44KB
Sample

240726-2yl3jazfnl
MD5

e55716284a21c7e7263b64f81b69ad94
SHA1

1940688e0a37f7ef64493423f281c171edabd465
SHA256

c25d9b3623783cf4ec45e6616c9784d3191150a4ef34e3c7e6961f8fdf605e40
SHA512

d7375e5a677917d7c484adb3e1a456f7b7b6acab564b19881bf02ae501b84c1769de9d7b5384292c306247cff7e628f1159f3de1cd95ebb54599a35150288872
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TF:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-26_e55716284a21c7e7263b64f81b69ad94_cryptolocker
- Size
  
  44KB
- MD5
  
  e55716284a21c7e7263b64f81b69ad94
- SHA1
  
  1940688e0a37f7ef64493423f281c171edabd465
- SHA256
  
  c25d9b3623783cf4ec45e6616c9784d3191150a4ef34e3c7e6961f8fdf605e40
- SHA512
  
  d7375e5a677917d7c484adb3e1a456f7b7b6acab564b19881bf02ae501b84c1769de9d7b5384292c306247cff7e628f1159f3de1cd95ebb54599a35150288872
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TF:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2