9c6c8cf45371883f8f12a10da5703c81d861a41a09ee98f4a59c139dbc5377d4 | Triage

Sharing

General

Target

2024-09-19_9e9e83556b0d07e269f7fd5aa99be6cb_cryptolocker
Size

45KB
Sample

240919-d5klaayfle
MD5

9e9e83556b0d07e269f7fd5aa99be6cb
SHA1

2c1db74de5e7487a95d4b76ff2c153baec89bba7
SHA256

9c6c8cf45371883f8f12a10da5703c81d861a41a09ee98f4a59c139dbc5377d4
SHA512

2670092235fa5399dfeab81753d21a35bf3556ba3ab7058866615ad63a4f3608556db0e3153f40504496372f5ffb9ead77b8358877a765d7e3b7da463d893e5b
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldf5:xj+VGMOtEvwDpjk/f5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_9e9e83556b0d07e269f7fd5aa99be6cb_cryptolocker
- Size
  
  45KB
- MD5
  
  9e9e83556b0d07e269f7fd5aa99be6cb
- SHA1
  
  2c1db74de5e7487a95d4b76ff2c153baec89bba7
- SHA256
  
  9c6c8cf45371883f8f12a10da5703c81d861a41a09ee98f4a59c139dbc5377d4
- SHA512
  
  2670092235fa5399dfeab81753d21a35bf3556ba3ab7058866615ad63a4f3608556db0e3153f40504496372f5ffb9ead77b8358877a765d7e3b7da463d893e5b
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldf5:xj+VGMOtEvwDpjk/f5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2