df2977bfaa9452351a5af4aacf78eefafe7e1778f70741f0c4ea433663bd361c | Triage

Sharing

General

Target

2024-08-11_553237687f90208ad55f27b66785924c_cryptolocker
Size

5.5MB
Sample

240811-av7fhswejl
MD5

553237687f90208ad55f27b66785924c
SHA1

4e690583a57ddcbdbe5b5b9551fdf6da409ac465
SHA256

df2977bfaa9452351a5af4aacf78eefafe7e1778f70741f0c4ea433663bd361c
SHA512

5fe24cd4a2559fac4527c8a84e0b3b4148f89d873ed91ebf593d13f0351f9bc0e47a33a76085222390e28f5f88bff91a4e7f7dab66846ddc17457cf268a9b415
SSDEEP

98304:Vd3WWklj4b+ZTRXb81tTFjWYt8nfa9WfkOsm5UfjQNYT/StkkLlDzXgsOUlE8Fo:Vd3Vklsb+ZKyYt8fMtOsm5UfjQNqSKcW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-11_553237687f90208ad55f27b66785924c_cryptolocker
- Size
  
  5.5MB
- MD5
  
  553237687f90208ad55f27b66785924c
- SHA1
  
  4e690583a57ddcbdbe5b5b9551fdf6da409ac465
- SHA256
  
  df2977bfaa9452351a5af4aacf78eefafe7e1778f70741f0c4ea433663bd361c
- SHA512
  
  5fe24cd4a2559fac4527c8a84e0b3b4148f89d873ed91ebf593d13f0351f9bc0e47a33a76085222390e28f5f88bff91a4e7f7dab66846ddc17457cf268a9b415
- SSDEEP
  
  98304:Vd3WWklj4b+ZTRXb81tTFjWYt8nfa9WfkOsm5UfjQNYT/StkkLlDzXgsOUlE8Fo:Vd3Vklsb+ZKyYt8fMtOsm5UfjQNqSKcW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2