c54b2d9c49f39713dc35f7598e82718b1646609fb75a6e7990ee114113872150 | Triage

Sharing

General

Target

2024-09-05_d0d32b24f16fa3251910022f3eb7d057_cryptolocker
Size

43KB
Sample

240905-pfhwya1eqg
MD5

d0d32b24f16fa3251910022f3eb7d057
SHA1

69e9f589ffd22db320da8157e4384cea7a8d7c17
SHA256

c54b2d9c49f39713dc35f7598e82718b1646609fb75a6e7990ee114113872150
SHA512

c8af55e91eee9ee26ecffb21bb8ba6c46407bfed2e4ff5a66f97c31ba7024d28b7df0d945ffed5f4f307c0a7744436f6699b0a2a430944a237f4a61c55b2643a
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrQ:bCDOw9aMDooc+vAqjM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_d0d32b24f16fa3251910022f3eb7d057_cryptolocker
- Size
  
  43KB
- MD5
  
  d0d32b24f16fa3251910022f3eb7d057
- SHA1
  
  69e9f589ffd22db320da8157e4384cea7a8d7c17
- SHA256
  
  c54b2d9c49f39713dc35f7598e82718b1646609fb75a6e7990ee114113872150
- SHA512
  
  c8af55e91eee9ee26ecffb21bb8ba6c46407bfed2e4ff5a66f97c31ba7024d28b7df0d945ffed5f4f307c0a7744436f6699b0a2a430944a237f4a61c55b2643a
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrQ:bCDOw9aMDooc+vAqjM
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2