32ea176645bbdac3745b88e08466f99d3355142e77d4b66c01115c7a4a143459 | Triage

Sharing

General

Target

2024-09-08_ee6b43d0d2adec8e454cfa3ab2b9219a_cryptolocker
Size

32KB
Sample

240908-zjghdsxape
MD5

ee6b43d0d2adec8e454cfa3ab2b9219a
SHA1

77f206322b8697565e683b5bedaae106a8772bec
SHA256

32ea176645bbdac3745b88e08466f99d3355142e77d4b66c01115c7a4a143459
SHA512

fe1045a445318e215528e5ff6a74d3d0754c321a9751b0f345f725a7f942d0577192c6233051ae8a22de998c1b5911f2c9737ddcf040240bee9ef57e3a9bd2cf
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdo7:bAvJCYOOvbRPDEgXRcJC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-08_ee6b43d0d2adec8e454cfa3ab2b9219a_cryptolocker
- Size
  
  32KB
- MD5
  
  ee6b43d0d2adec8e454cfa3ab2b9219a
- SHA1
  
  77f206322b8697565e683b5bedaae106a8772bec
- SHA256
  
  32ea176645bbdac3745b88e08466f99d3355142e77d4b66c01115c7a4a143459
- SHA512
  
  fe1045a445318e215528e5ff6a74d3d0754c321a9751b0f345f725a7f942d0577192c6233051ae8a22de998c1b5911f2c9737ddcf040240bee9ef57e3a9bd2cf
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdo7:bAvJCYOOvbRPDEgXRcJC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2