591a14542bcda60b216b14d452442c2b5d554be1b8d1f64a274126beb62b024e | Triage

Sharing

General

Target

2024-09-19_e5e0096503a0d8af012a9088b7e0bbe0_cryptolocker
Size

66KB
Sample

240919-eap3ysyhpf
MD5

e5e0096503a0d8af012a9088b7e0bbe0
SHA1

ddb8a1b24336d9a5d792a073c3f1ccbe487320cd
SHA256

591a14542bcda60b216b14d452442c2b5d554be1b8d1f64a274126beb62b024e
SHA512

2c4f3acb2093d657793432ffd9d362cc876024cd1afbba728ec16cd3e6aad45e895b51edfeaf0e57cfc0752e4f8b8726363a3aea3625d1785302ef12fc1c20dd
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29984C:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7m

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_e5e0096503a0d8af012a9088b7e0bbe0_cryptolocker
- Size
  
  66KB
- MD5
  
  e5e0096503a0d8af012a9088b7e0bbe0
- SHA1
  
  ddb8a1b24336d9a5d792a073c3f1ccbe487320cd
- SHA256
  
  591a14542bcda60b216b14d452442c2b5d554be1b8d1f64a274126beb62b024e
- SHA512
  
  2c4f3acb2093d657793432ffd9d362cc876024cd1afbba728ec16cd3e6aad45e895b51edfeaf0e57cfc0752e4f8b8726363a3aea3625d1785302ef12fc1c20dd
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29984C:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7m
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2