074b250aeb860088278d880e7a67847914ac7524468713cb2044e0c8df85e527 | Triage

Sharing

General

Target

2024-09-14_c5f0fa6a5074967d97e44c9ff9d1c125_cryptolocker
Size

48KB
Sample

240914-efj4wsvhkj
MD5

c5f0fa6a5074967d97e44c9ff9d1c125
SHA1

91d656dd4cb081720fefd76970ef943c84eb8f76
SHA256

074b250aeb860088278d880e7a67847914ac7524468713cb2044e0c8df85e527
SHA512

9fdc9db62ae5a8e2fb8e781fc6d5392e6c2e31ee70f4256b07e0d30f571bc5267b30e8a399c2a1400f3155e54cc74b9abd5d2c63e76c8c325f1e7b3428cde451
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPcL:P6QFElP6k+MRQMOtEvwDpjBQpVXr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-14_c5f0fa6a5074967d97e44c9ff9d1c125_cryptolocker
- Size
  
  48KB
- MD5
  
  c5f0fa6a5074967d97e44c9ff9d1c125
- SHA1
  
  91d656dd4cb081720fefd76970ef943c84eb8f76
- SHA256
  
  074b250aeb860088278d880e7a67847914ac7524468713cb2044e0c8df85e527
- SHA512
  
  9fdc9db62ae5a8e2fb8e781fc6d5392e6c2e31ee70f4256b07e0d30f571bc5267b30e8a399c2a1400f3155e54cc74b9abd5d2c63e76c8c325f1e7b3428cde451
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPcL:P6QFElP6k+MRQMOtEvwDpjBQpVXr
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2