68f701937e132c203298b36ed0ba5c7ffe67e4370d9bd7df89bd54d2f34c3c05 | Triage

Sharing

General

Target

2024-09-15_16ff55f09bc87a75bd273fbbdaa4c697_cryptolocker
Size

81KB
Sample

240915-f5w1esxhmm
MD5

16ff55f09bc87a75bd273fbbdaa4c697
SHA1

4297f51cd68a1a8867598b240d325b54dd7f9ae0
SHA256

68f701937e132c203298b36ed0ba5c7ffe67e4370d9bd7df89bd54d2f34c3c05
SHA512

8d778f2e2ffa7f9090f870815a912851986a55eb4ab0b12e1cf633a16301c6bb649eff5434ddb818af475436d8a72dd695514cbc7516992ef14a2c064e015d91
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrk:TCjsIOtEvwDpj5HE/OUHnSMq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-15_16ff55f09bc87a75bd273fbbdaa4c697_cryptolocker
- Size
  
  81KB
- MD5
  
  16ff55f09bc87a75bd273fbbdaa4c697
- SHA1
  
  4297f51cd68a1a8867598b240d325b54dd7f9ae0
- SHA256
  
  68f701937e132c203298b36ed0ba5c7ffe67e4370d9bd7df89bd54d2f34c3c05
- SHA512
  
  8d778f2e2ffa7f9090f870815a912851986a55eb4ab0b12e1cf633a16301c6bb649eff5434ddb818af475436d8a72dd695514cbc7516992ef14a2c064e015d91
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrk:TCjsIOtEvwDpj5HE/OUHnSMq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2