6ba1c7eecea0b7d5351de66451523ac96d2b491810ac3d2dd4de6c18d70a6f0a | Triage

Sharing

General

Target

2024-09-06_29d0b4a6b762a85d2c88c6d8adcf9031_cryptolocker
Size

31KB
Sample

240906-h7k22stbqq
MD5

29d0b4a6b762a85d2c88c6d8adcf9031
SHA1

2068969f50d9ab663463f6948f53dfb7aa952f2b
SHA256

6ba1c7eecea0b7d5351de66451523ac96d2b491810ac3d2dd4de6c18d70a6f0a
SHA512

2cd6b81e26a2281e7c356a3d6b3282ba7ac488117b8f5f1cd5af906d9c4467e114f72c8f1f9962031d11e31bde391f10d0d8891708746282d1b23d87102f25c0
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfr:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-06_29d0b4a6b762a85d2c88c6d8adcf9031_cryptolocker
- Size
  
  31KB
- MD5
  
  29d0b4a6b762a85d2c88c6d8adcf9031
- SHA1
  
  2068969f50d9ab663463f6948f53dfb7aa952f2b
- SHA256
  
  6ba1c7eecea0b7d5351de66451523ac96d2b491810ac3d2dd4de6c18d70a6f0a
- SHA512
  
  2cd6b81e26a2281e7c356a3d6b3282ba7ac488117b8f5f1cd5af906d9c4467e114f72c8f1f9962031d11e31bde391f10d0d8891708746282d1b23d87102f25c0
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfr:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2