06ae8aab685079b369d8307629650972f9b1943e66a69b785dc5bab0e88ecd3a | Triage

Sharing

General

Target

2024-09-02_e1be430b1ef921b63d1356146668a4db_cryptolocker
Size

23KB
Sample

240902-lqqgzsxdlp
MD5

e1be430b1ef921b63d1356146668a4db
SHA1

d72d8f35601347101e1483af80b73e78280d7d77
SHA256

06ae8aab685079b369d8307629650972f9b1943e66a69b785dc5bab0e88ecd3a
SHA512

abc88601c7d71c0a35a3eaf046cb74b8339c86c4e27eda4b3502095f8c36e45963377db5ed80db40b4aa71f39b54dec0648314c94fa53a0ff38a30c6784b78a2
SSDEEP

384:CBOkkLPcM4JIM39ZR8Z87XHjeKtEEue+63BYp2tOOtEvwDpjqIGRh:CB19M4JIhZMHSKtweHBrtOOtEvwDpjG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-02_e1be430b1ef921b63d1356146668a4db_cryptolocker
- Size
  
  23KB
- MD5
  
  e1be430b1ef921b63d1356146668a4db
- SHA1
  
  d72d8f35601347101e1483af80b73e78280d7d77
- SHA256
  
  06ae8aab685079b369d8307629650972f9b1943e66a69b785dc5bab0e88ecd3a
- SHA512
  
  abc88601c7d71c0a35a3eaf046cb74b8339c86c4e27eda4b3502095f8c36e45963377db5ed80db40b4aa71f39b54dec0648314c94fa53a0ff38a30c6784b78a2
- SSDEEP
  
  384:CBOkkLPcM4JIM39ZR8Z87XHjeKtEEue+63BYp2tOOtEvwDpjqIGRh:CB19M4JIhZMHSKtweHBrtOOtEvwDpjG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2