b218b3a665a88f6248c195a375b201e9f665c46bbefe167d74af8fc3def8eaef | Triage

Sharing

General

Target

2024-09-19_53a643e6655943e9705c2fefeb54be20_cryptolocker
Size

41KB
Sample

240919-f6gbcsshke
MD5

53a643e6655943e9705c2fefeb54be20
SHA1

fd17969e066c54e63f1ac0f6503145eac7841441
SHA256

b218b3a665a88f6248c195a375b201e9f665c46bbefe167d74af8fc3def8eaef
SHA512

fcaf987735fa07cb4e6077e583cb284d893e6844d13ae9bbca16553d7d609d7528308d0c8dff9045f749b1e29f504cb3f12ca5af2f0cf6e1ffeb7bbb3802cac2
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4tKMLGokL:vj+jsMQMOtEvwDpj5Ht1qokL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_53a643e6655943e9705c2fefeb54be20_cryptolocker
- Size
  
  41KB
- MD5
  
  53a643e6655943e9705c2fefeb54be20
- SHA1
  
  fd17969e066c54e63f1ac0f6503145eac7841441
- SHA256
  
  b218b3a665a88f6248c195a375b201e9f665c46bbefe167d74af8fc3def8eaef
- SHA512
  
  fcaf987735fa07cb4e6077e583cb284d893e6844d13ae9bbca16553d7d609d7528308d0c8dff9045f749b1e29f504cb3f12ca5af2f0cf6e1ffeb7bbb3802cac2
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4tKMLGokL:vj+jsMQMOtEvwDpj5Ht1qokL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2