d6a4c07a1d45ea9464f994179907ad10f99db0535f6fa3424d4fbf00059c9621 | Triage

Sharing

General

Target

2024-09-05_a0daa947a8d1f824a42039864a9f34c6_cryptolocker
Size

66KB
Sample

240905-pdgwvs1elf
MD5

a0daa947a8d1f824a42039864a9f34c6
SHA1

6b21f0a44e2b51fab8ae5ab43b94e80c805baa23
SHA256

d6a4c07a1d45ea9464f994179907ad10f99db0535f6fa3424d4fbf00059c9621
SHA512

56392fa35fb87c9493c84fc77db5cf994ae5c19ca340d540e33559c02205f3546f0b51bce3afd1f132e64c7014fddc3580655c73780b1f5467ffefaa78ce47db
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4n:BbdDmjr+OtEvwDpjM8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_a0daa947a8d1f824a42039864a9f34c6_cryptolocker
- Size
  
  66KB
- MD5
  
  a0daa947a8d1f824a42039864a9f34c6
- SHA1
  
  6b21f0a44e2b51fab8ae5ab43b94e80c805baa23
- SHA256
  
  d6a4c07a1d45ea9464f994179907ad10f99db0535f6fa3424d4fbf00059c9621
- SHA512
  
  56392fa35fb87c9493c84fc77db5cf994ae5c19ca340d540e33559c02205f3546f0b51bce3afd1f132e64c7014fddc3580655c73780b1f5467ffefaa78ce47db
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4n:BbdDmjr+OtEvwDpjM8h
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2