b5df78f69ebeaf24a3f2c46474f20b3690d260ec4899434b16bd52cc796e271d | Triage

Sharing

General

Target

2024-09-19_6e671544f008ddab6c081af30bed1d02_cryptolocker
Size

76KB
Sample

240919-e3z4ma1cme
MD5

6e671544f008ddab6c081af30bed1d02
SHA1

7a356aa8173e91c65a3dfec7400baa77d8086a48
SHA256

b5df78f69ebeaf24a3f2c46474f20b3690d260ec4899434b16bd52cc796e271d
SHA512

f5a47646e7257816d530dd6cd0b69d3ebb1911662de0f80c2824c538a831de390f243ccd40354393dc85f7f43357f1abd75219da360e2f2a7afc6b148e6f8a4f
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsi:X6a+SOtEvwDpjBZYvQd2Z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_6e671544f008ddab6c081af30bed1d02_cryptolocker
- Size
  
  76KB
- MD5
  
  6e671544f008ddab6c081af30bed1d02
- SHA1
  
  7a356aa8173e91c65a3dfec7400baa77d8086a48
- SHA256
  
  b5df78f69ebeaf24a3f2c46474f20b3690d260ec4899434b16bd52cc796e271d
- SHA512
  
  f5a47646e7257816d530dd6cd0b69d3ebb1911662de0f80c2824c538a831de390f243ccd40354393dc85f7f43357f1abd75219da360e2f2a7afc6b148e6f8a4f
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsi:X6a+SOtEvwDpjBZYvQd2Z
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2