57c691112ae72482620541b633db7adade0916b59600110b83fe0fa30885991f | Triage

Sharing

General

Target

2024-09-19_6a8845cbcda9ed712441d3c73bea80c5_cryptolocker
Size

23KB
Sample

240919-d2nhrsydpe
MD5

6a8845cbcda9ed712441d3c73bea80c5
SHA1

2682e5a755e43778e5ae56ace5b482efb12a9d1f
SHA256

57c691112ae72482620541b633db7adade0916b59600110b83fe0fa30885991f
SHA512

9ebac93800b4f56daecfaac4e915fe658872dc1f0755979d1b14b1fd5c6364060e570d44654c6f617499e253753bd84e32ee8243ff0fb2e81f7b7c1d68bee590
SSDEEP

384:QBOkkLPcM4JIM39ZR8Z87XHjeKtFDcRYpTtOOtEvwDpjqIGRD:QB19M4JIhZMHSKtBcROtOOtEvwDpjg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_6a8845cbcda9ed712441d3c73bea80c5_cryptolocker
- Size
  
  23KB
- MD5
  
  6a8845cbcda9ed712441d3c73bea80c5
- SHA1
  
  2682e5a755e43778e5ae56ace5b482efb12a9d1f
- SHA256
  
  57c691112ae72482620541b633db7adade0916b59600110b83fe0fa30885991f
- SHA512
  
  9ebac93800b4f56daecfaac4e915fe658872dc1f0755979d1b14b1fd5c6364060e570d44654c6f617499e253753bd84e32ee8243ff0fb2e81f7b7c1d68bee590
- SSDEEP
  
  384:QBOkkLPcM4JIM39ZR8Z87XHjeKtFDcRYpTtOOtEvwDpjqIGRD:QB19M4JIhZMHSKtBcROtOOtEvwDpjg
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2