2b5e9b68c3ebd0cdc6063bf571eecd55c52bf95d9167dc446675edb18c0c5aad | Triage

Sharing

General

Target

2024-09-19_d6293a7aeab104804a725fca2a4164bd_cryptolocker
Size

35KB
Sample

240919-d83ahazaqn
MD5

d6293a7aeab104804a725fca2a4164bd
SHA1

6e6b83f4c064af88f6b849d20d2069bb0433a7d9
SHA256

2b5e9b68c3ebd0cdc6063bf571eecd55c52bf95d9167dc446675edb18c0c5aad
SHA512

4b72244f38da7e2f7f3c94fc0aad6e66b8daf90d87188e5eec3b17892ca85a1d78cbdb2db01e9c5a624e38a3cfec0300294b5153796cca227edfee6de699b1f5
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5k:V6QFElP6n+gMQMOtEvwDpjyaW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_d6293a7aeab104804a725fca2a4164bd_cryptolocker
- Size
  
  35KB
- MD5
  
  d6293a7aeab104804a725fca2a4164bd
- SHA1
  
  6e6b83f4c064af88f6b849d20d2069bb0433a7d9
- SHA256
  
  2b5e9b68c3ebd0cdc6063bf571eecd55c52bf95d9167dc446675edb18c0c5aad
- SHA512
  
  4b72244f38da7e2f7f3c94fc0aad6e66b8daf90d87188e5eec3b17892ca85a1d78cbdb2db01e9c5a624e38a3cfec0300294b5153796cca227edfee6de699b1f5
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5k:V6QFElP6n+gMQMOtEvwDpjyaW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2