2dd6a6d127bcf8b403f521bb8ec3809af58f5e813e2b38fe2ec9906dd73d3c3e | Triage

Sharing

General

Target

2024-09-09_9ddce8cb3482875f756ca02614a5dcd7_cryptolocker
Size

48KB
Sample

240909-e4akcs1hmk
MD5

9ddce8cb3482875f756ca02614a5dcd7
SHA1

9b33f3494d717a5afd6b394ad975144121ab3bfb
SHA256

2dd6a6d127bcf8b403f521bb8ec3809af58f5e813e2b38fe2ec9906dd73d3c3e
SHA512

110d304b85a7648c8564bfd3303e13cbd854e05d9d7fbbe0f0b408d47d8ccef3fcedeac3427f1a6b7a933e3e34610d6ca6af22f9d455c4f2945c6e341aa3b36d
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAr:P6QFElP6k+MRQMOtEvwDpjBQpVX8Ar

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-09_9ddce8cb3482875f756ca02614a5dcd7_cryptolocker
- Size
  
  48KB
- MD5
  
  9ddce8cb3482875f756ca02614a5dcd7
- SHA1
  
  9b33f3494d717a5afd6b394ad975144121ab3bfb
- SHA256
  
  2dd6a6d127bcf8b403f521bb8ec3809af58f5e813e2b38fe2ec9906dd73d3c3e
- SHA512
  
  110d304b85a7648c8564bfd3303e13cbd854e05d9d7fbbe0f0b408d47d8ccef3fcedeac3427f1a6b7a933e3e34610d6ca6af22f9d455c4f2945c6e341aa3b36d
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAr:P6QFElP6k+MRQMOtEvwDpjBQpVX8Ar
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2