e23a1ae79d76a45939b6df47f085d2a107db6c5e85af0028611b6b1d1acf29f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-14_3a4a4b66d89920d9531318fc1660ad67_cryptolocker
Size

63KB
Sample

240914-c678astdqg
MD5

3a4a4b66d89920d9531318fc1660ad67
SHA1

22454375a00f7e6bd0195ead40ad58a1816868b0
SHA256

e23a1ae79d76a45939b6df47f085d2a107db6c5e85af0028611b6b1d1acf29f1
SHA512

1b9f71583454d9572d0fbc4a3e23d973132e6dead5d33800f159dcd421652342b12d72a01865a7c7af562c3e9d3d2acbe29513a08cd1e9174c31427d447a1726
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5A/3g/6:V6a+pOtEvwDpjvh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-14_3a4a4b66d89920d9531318fc1660ad67_cryptolocker
- Size
  
  63KB
- MD5
  
  3a4a4b66d89920d9531318fc1660ad67
- SHA1
  
  22454375a00f7e6bd0195ead40ad58a1816868b0
- SHA256
  
  e23a1ae79d76a45939b6df47f085d2a107db6c5e85af0028611b6b1d1acf29f1
- SHA512
  
  1b9f71583454d9572d0fbc4a3e23d973132e6dead5d33800f159dcd421652342b12d72a01865a7c7af562c3e9d3d2acbe29513a08cd1e9174c31427d447a1726
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5A/3g/6:V6a+pOtEvwDpjvh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2