ec89fd7b3ae8c9fa0f4176c5ea5c6e4cc70170ee86279f907ae7439a58e09d54 | Triage

Sharing

General

Target

2024-09-19_3f57873e005ebecca142ab5ca7d08e65_cryptolocker
Size

50KB
Sample

240919-g5224svdla
MD5

3f57873e005ebecca142ab5ca7d08e65
SHA1

45b3333f315d47af92a57e9b3ef8e3dea32c1186
SHA256

ec89fd7b3ae8c9fa0f4176c5ea5c6e4cc70170ee86279f907ae7439a58e09d54
SHA512

838304dca92801d739d8d10dcd6cd6fb4403a77d1cccda6df0b51a722e74d821b1e39e0ab29a2cbba1f38149fb4acbcf0237b3feb87e1de7afd26e1265a24271
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshMx:aq7tdgI2MyzNORQtOflIwoHNV2XBFV77

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_3f57873e005ebecca142ab5ca7d08e65_cryptolocker
- Size
  
  50KB
- MD5
  
  3f57873e005ebecca142ab5ca7d08e65
- SHA1
  
  45b3333f315d47af92a57e9b3ef8e3dea32c1186
- SHA256
  
  ec89fd7b3ae8c9fa0f4176c5ea5c6e4cc70170ee86279f907ae7439a58e09d54
- SHA512
  
  838304dca92801d739d8d10dcd6cd6fb4403a77d1cccda6df0b51a722e74d821b1e39e0ab29a2cbba1f38149fb4acbcf0237b3feb87e1de7afd26e1265a24271
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshMx:aq7tdgI2MyzNORQtOflIwoHNV2XBFV77
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2