4235c5b5f314d546c9f6345492bb8911698e6cfbdde5751cc6c187d2e25ecd44 | Triage

Sharing

General

Target

2024-09-19_aa6a0e1833d805dcfb8b1cbc854777af_cryptolocker
Size

62KB
Sample

240919-f8e63stajd
MD5

aa6a0e1833d805dcfb8b1cbc854777af
SHA1

1817d8bca5cd45a56c338dc5e0b68319982b388a
SHA256

4235c5b5f314d546c9f6345492bb8911698e6cfbdde5751cc6c187d2e25ecd44
SHA512

30ca9e6ffe328c5e89061b2fa2d9009236b377d39dce59494ab914859dd38f86f76eb4299ae793808b3ead35861fa67ffab6e8c32e929ee90aca37b5364ac3a0
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293X2K:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_aa6a0e1833d805dcfb8b1cbc854777af_cryptolocker
- Size
  
  62KB
- MD5
  
  aa6a0e1833d805dcfb8b1cbc854777af
- SHA1
  
  1817d8bca5cd45a56c338dc5e0b68319982b388a
- SHA256
  
  4235c5b5f314d546c9f6345492bb8911698e6cfbdde5751cc6c187d2e25ecd44
- SHA512
  
  30ca9e6ffe328c5e89061b2fa2d9009236b377d39dce59494ab914859dd38f86f76eb4299ae793808b3ead35861fa67ffab6e8c32e929ee90aca37b5364ac3a0
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293X2K:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2