e0edd389cda1f0bcd6fd736560ddd63156a31ef4618101ae37ce5463b96a4ff4 | Triage

Sharing

General

Target

2024-09-19_f15274d562a66e82a353c57d597e3e6d_cryptolocker
Size

37KB
Sample

240919-f99r3staqb
MD5

f15274d562a66e82a353c57d597e3e6d
SHA1

f93456c2771ebf6729129b9cc0dcfbc2e78b206c
SHA256

e0edd389cda1f0bcd6fd736560ddd63156a31ef4618101ae37ce5463b96a4ff4
SHA512

e5ef1495f564b42f81b1d6cc911917fd28d2aa25a3e49a46b131abf2f3ec92f071ca1ce3504aef18ea71aff268cfb88938a6ed08004bc7091fe47f541056853d
SSDEEP

768:btB9g/WItCSsAGjX7r3BPOMHocM4vUUOmX:btB9g/xtCSKfxLIcMzUn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_f15274d562a66e82a353c57d597e3e6d_cryptolocker
- Size
  
  37KB
- MD5
  
  f15274d562a66e82a353c57d597e3e6d
- SHA1
  
  f93456c2771ebf6729129b9cc0dcfbc2e78b206c
- SHA256
  
  e0edd389cda1f0bcd6fd736560ddd63156a31ef4618101ae37ce5463b96a4ff4
- SHA512
  
  e5ef1495f564b42f81b1d6cc911917fd28d2aa25a3e49a46b131abf2f3ec92f071ca1ce3504aef18ea71aff268cfb88938a6ed08004bc7091fe47f541056853d
- SSDEEP
  
  768:btB9g/WItCSsAGjX7r3BPOMHocM4vUUOmX:btB9g/xtCSKfxLIcMzUn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2