ee1ec3fe4d1affa0f620bc59261d4b29e0be67d7ea9938ef729b62d299c43e39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-05_472fbe0eeebcfec13874f5c52ed4b3d4_cryptolocker
Size

77KB
Sample

240905-xc8l7axbml
MD5

472fbe0eeebcfec13874f5c52ed4b3d4
SHA1

e40ef75a1e8933189a933406cb9564dc70fa5df6
SHA256

ee1ec3fe4d1affa0f620bc59261d4b29e0be67d7ea9938ef729b62d299c43e39
SHA512

4177063fb995b3f703229f69ce272b8afba858c0f17bdd1414f2fd9df11bb62c223f8d8da766c0418ada143c7f946e23b79776600f8c7faadceacc91e2b9bee0
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHs/:X6a+SOtEvwDpjBZYvQd2Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_472fbe0eeebcfec13874f5c52ed4b3d4_cryptolocker
- Size
  
  77KB
- MD5
  
  472fbe0eeebcfec13874f5c52ed4b3d4
- SHA1
  
  e40ef75a1e8933189a933406cb9564dc70fa5df6
- SHA256
  
  ee1ec3fe4d1affa0f620bc59261d4b29e0be67d7ea9938ef729b62d299c43e39
- SHA512
  
  4177063fb995b3f703229f69ce272b8afba858c0f17bdd1414f2fd9df11bb62c223f8d8da766c0418ada143c7f946e23b79776600f8c7faadceacc91e2b9bee0
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHs/:X6a+SOtEvwDpjBZYvQd2Y
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2