2c1551a0e311d3421783e0a813385b5e9883d2ec397ddf813eff456a62b4561a | Triage

Sharing

General

Target

2024-09-05_dbcbce05bb7138fb558d1019dc2d5c00_cryptolocker
Size

63KB
Sample

240905-pf13hszhnr
MD5

dbcbce05bb7138fb558d1019dc2d5c00
SHA1

7a2616b1b915b4968e4ba67419dd5dbe2b84b69b
SHA256

2c1551a0e311d3421783e0a813385b5e9883d2ec397ddf813eff456a62b4561a
SHA512

f291ad6361b36e575ad733accb16e2e3f4103b0ec9ece6239e570a6eff9b7af61ede5a79680376459375fed7ffea62ca11cd1a2eefe3aeed8460d4815111767c
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNuSA:TCjsIOtEvwDpj5HE/OUHnSMZ3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_dbcbce05bb7138fb558d1019dc2d5c00_cryptolocker
- Size
  
  63KB
- MD5
  
  dbcbce05bb7138fb558d1019dc2d5c00
- SHA1
  
  7a2616b1b915b4968e4ba67419dd5dbe2b84b69b
- SHA256
  
  2c1551a0e311d3421783e0a813385b5e9883d2ec397ddf813eff456a62b4561a
- SHA512
  
  f291ad6361b36e575ad733accb16e2e3f4103b0ec9ece6239e570a6eff9b7af61ede5a79680376459375fed7ffea62ca11cd1a2eefe3aeed8460d4815111767c
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNuSA:TCjsIOtEvwDpj5HE/OUHnSMZ3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2