cce0c6d04499ec7767657c62eed77481c2ed193d19ecda4ab25e2d328ce11760 | Triage

Sharing

General

Target

2024-09-19_ff90b2ce0f5e34f843cb9e0e782649fe_cryptolocker
Size

42KB
Sample

240919-ecwnhszaqg
MD5

ff90b2ce0f5e34f843cb9e0e782649fe
SHA1

11fa2e7b4f4980ad1472f056412668ee3c4c574c
SHA256

cce0c6d04499ec7767657c62eed77481c2ed193d19ecda4ab25e2d328ce11760
SHA512

ce9d38ffcc442000a3fccee41c9eb7c7e0c435255e666c8a655041b4e9f6e12588bb70fef3c6d63e2c1c6ed8c9d0fe49bbec9908087a8cfa2c1c134cc0c3fddc
SSDEEP

768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCq:bA6YcA/X6G0W143Q5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_ff90b2ce0f5e34f843cb9e0e782649fe_cryptolocker
- Size
  
  42KB
- MD5
  
  ff90b2ce0f5e34f843cb9e0e782649fe
- SHA1
  
  11fa2e7b4f4980ad1472f056412668ee3c4c574c
- SHA256
  
  cce0c6d04499ec7767657c62eed77481c2ed193d19ecda4ab25e2d328ce11760
- SHA512
  
  ce9d38ffcc442000a3fccee41c9eb7c7e0c435255e666c8a655041b4e9f6e12588bb70fef3c6d63e2c1c6ed8c9d0fe49bbec9908087a8cfa2c1c134cc0c3fddc
- SSDEEP
  
  768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCq:bA6YcA/X6G0W143Q5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2