8551b36540f1bf97f2974dbcf2cf87896cb50fef4d731a1c4aafdc1f337d1b67 | Triage

Sharing

General

Target

2024-09-09_b146c1d4d21e2ae3f9b266354b01ef34_cryptolocker
Size

80KB
Sample

240909-2cl6eatclp
MD5

b146c1d4d21e2ae3f9b266354b01ef34
SHA1

5fbbf48a3affacf0674db414c5494d606db0ad69
SHA256

8551b36540f1bf97f2974dbcf2cf87896cb50fef4d731a1c4aafdc1f337d1b67
SHA512

8a1c5219874a8c8342537d54a18a079684270376746f7bac4d24d65d9d282581b4c5d77581caf09ae37cda43d66f01d7422cba0668782d55e7fc29fa2424e16d
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktN2r:X6a+SOtEvwDpjBZYvQd25

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-09_b146c1d4d21e2ae3f9b266354b01ef34_cryptolocker
- Size
  
  80KB
- MD5
  
  b146c1d4d21e2ae3f9b266354b01ef34
- SHA1
  
  5fbbf48a3affacf0674db414c5494d606db0ad69
- SHA256
  
  8551b36540f1bf97f2974dbcf2cf87896cb50fef4d731a1c4aafdc1f337d1b67
- SHA512
  
  8a1c5219874a8c8342537d54a18a079684270376746f7bac4d24d65d9d282581b4c5d77581caf09ae37cda43d66f01d7422cba0668782d55e7fc29fa2424e16d
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktN2r:X6a+SOtEvwDpjBZYvQd25
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2