9ee0a3f202deb29529facbdf2018817861a2340d0f0626c6875a6ca7b38f2e2e | Triage

Sharing

General

Target

2024-09-19_2aab050ae9664f4849645482214f7b44_cryptolocker
Size

47KB
Sample

240919-ez8lla1dlk
MD5

2aab050ae9664f4849645482214f7b44
SHA1

18226f5ed90584f95a4eda07422535dc3eaf34af
SHA256

9ee0a3f202deb29529facbdf2018817861a2340d0f0626c6875a6ca7b38f2e2e
SHA512

5a864a3574867021b8f1acf45703f202af265d168444f2be41b694eca0e0a7c93832c7c7f7e074bbda9f4837b12397e184c5252534aea3390cd0f2cfaddaa4ed
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr1:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_2aab050ae9664f4849645482214f7b44_cryptolocker
- Size
  
  47KB
- MD5
  
  2aab050ae9664f4849645482214f7b44
- SHA1
  
  18226f5ed90584f95a4eda07422535dc3eaf34af
- SHA256
  
  9ee0a3f202deb29529facbdf2018817861a2340d0f0626c6875a6ca7b38f2e2e
- SHA512
  
  5a864a3574867021b8f1acf45703f202af265d168444f2be41b694eca0e0a7c93832c7c7f7e074bbda9f4837b12397e184c5252534aea3390cd0f2cfaddaa4ed
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr1:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2