b3abdb392497bb4a12def345900c77099e94bd1d271625ded91c06eaa6b3c9f7 | Triage

Sharing

General

Target

2024-09-12_6124aaa5cd843a945f68964df4058fdb_cryptolocker
Size

39KB
Sample

240912-c6al2axbph
MD5

6124aaa5cd843a945f68964df4058fdb
SHA1

5ef31cf0715fdc6004a4962f718d9e733cf6c032
SHA256

b3abdb392497bb4a12def345900c77099e94bd1d271625ded91c06eaa6b3c9f7
SHA512

753ae3b4bca204baf0446398f0484d7d1f0cb32a23f2aed1f479adae49596de36d56f688d7d5ae9d90dc283d6116482e1d7303ba18462ae86011a13f7bbffb59
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0o:X6QFElP6n+gJQMOtEvwDpjBmzDU5o

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_6124aaa5cd843a945f68964df4058fdb_cryptolocker
- Size
  
  39KB
- MD5
  
  6124aaa5cd843a945f68964df4058fdb
- SHA1
  
  5ef31cf0715fdc6004a4962f718d9e733cf6c032
- SHA256
  
  b3abdb392497bb4a12def345900c77099e94bd1d271625ded91c06eaa6b3c9f7
- SHA512
  
  753ae3b4bca204baf0446398f0484d7d1f0cb32a23f2aed1f479adae49596de36d56f688d7d5ae9d90dc283d6116482e1d7303ba18462ae86011a13f7bbffb59
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0o:X6QFElP6n+gJQMOtEvwDpjBmzDU5o
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2