022df0d434b54d03263545a48dd05b073af8616ff35ebd2703596a0f90e7231b | Triage

Sharing

General

Target

2024-07-27_bc2cc961dfeb019121402283457e6808_cryptolocker
Size

393KB
Sample

240727-ylhykavemp
MD5

bc2cc961dfeb019121402283457e6808
SHA1

33352a93a1a569c38e3d15c9951c44c8b337a1c6
SHA256

022df0d434b54d03263545a48dd05b073af8616ff35ebd2703596a0f90e7231b
SHA512

80215cc6f73f209d8ca48c085770ad6a0fe6179029c7140b42bd2e9b19ac7cfbd2679b1226e613e4b8603d82cf5182d2bfb1cd3c0b57a39ecfe2abe32c3f665d
SSDEEP

6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRf:nnOflT/ZFIjBz3xjTxynGUOUhXRf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-27_bc2cc961dfeb019121402283457e6808_cryptolocker
- Size
  
  393KB
- MD5
  
  bc2cc961dfeb019121402283457e6808
- SHA1
  
  33352a93a1a569c38e3d15c9951c44c8b337a1c6
- SHA256
  
  022df0d434b54d03263545a48dd05b073af8616ff35ebd2703596a0f90e7231b
- SHA512
  
  80215cc6f73f209d8ca48c085770ad6a0fe6179029c7140b42bd2e9b19ac7cfbd2679b1226e613e4b8603d82cf5182d2bfb1cd3c0b57a39ecfe2abe32c3f665d
- SSDEEP
  
  6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRf:nnOflT/ZFIjBz3xjTxynGUOUhXRf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2