6c139463c6babdd32ff67f6ab23e1f24948c3098d0a9585af1d1c508c8760a39 | Triage

Sharing

General

Target

2024-09-05_7778148f4ddf5fd8f884da44461b4035_cryptolocker
Size

63KB
Sample

240905-t3n4pavdjl
MD5

7778148f4ddf5fd8f884da44461b4035
SHA1

1c611be29ca577ae9e828970fbb8bfebbc3f1d3c
SHA256

6c139463c6babdd32ff67f6ab23e1f24948c3098d0a9585af1d1c508c8760a39
SHA512

2dfc98d210678cd8564a4829a0fc8cedfb69f562e16717dc160879e60d63b32853b5889805a7734e93464e02f3ca0d86fdb40f13d47c90cbe1167cfd300845e9
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36ucNa:ZVxkGOtEvwDpjcaf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_7778148f4ddf5fd8f884da44461b4035_cryptolocker
- Size
  
  63KB
- MD5
  
  7778148f4ddf5fd8f884da44461b4035
- SHA1
  
  1c611be29ca577ae9e828970fbb8bfebbc3f1d3c
- SHA256
  
  6c139463c6babdd32ff67f6ab23e1f24948c3098d0a9585af1d1c508c8760a39
- SHA512
  
  2dfc98d210678cd8564a4829a0fc8cedfb69f562e16717dc160879e60d63b32853b5889805a7734e93464e02f3ca0d86fdb40f13d47c90cbe1167cfd300845e9
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36ucNa:ZVxkGOtEvwDpjcaf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2