6d196f2efd9a0724455ef27dcb4fe050eefb03f6d0a56279b4e23c09daeadfea | Triage

Sharing

General

Target

2024-09-19_3a3ad81d613c4780fc0438f7312ad555_cryptolocker
Size

62KB
Sample

240919-f5reyataqk
MD5

3a3ad81d613c4780fc0438f7312ad555
SHA1

19229962cd1b57df762f7d29736c8eca378032d8
SHA256

6d196f2efd9a0724455ef27dcb4fe050eefb03f6d0a56279b4e23c09daeadfea
SHA512

635fb4d6ba678a54656c16a2ff07c2863bf109e0c8a815dc2142261a887d3fca935eff8c911bf5a1b4d5560ba2fe006ca1b10d094fc390d611a35c461dfdf55e
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgg:DW60sllyWOtEvwDpjwF8J

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_3a3ad81d613c4780fc0438f7312ad555_cryptolocker
- Size
  
  62KB
- MD5
  
  3a3ad81d613c4780fc0438f7312ad555
- SHA1
  
  19229962cd1b57df762f7d29736c8eca378032d8
- SHA256
  
  6d196f2efd9a0724455ef27dcb4fe050eefb03f6d0a56279b4e23c09daeadfea
- SHA512
  
  635fb4d6ba678a54656c16a2ff07c2863bf109e0c8a815dc2142261a887d3fca935eff8c911bf5a1b4d5560ba2fe006ca1b10d094fc390d611a35c461dfdf55e
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgg:DW60sllyWOtEvwDpjwF8J
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2