434124d9f5b5bfe820a8025328bc33566d9392890fd005103bb01cfba05f682d | Triage

Sharing

General

Target

2024-09-19_e36c2f1bc0c0dbc13f6689672ded2e1c_cryptolocker
Size

57KB
Sample

240919-hax1cavhnn
MD5

e36c2f1bc0c0dbc13f6689672ded2e1c
SHA1

30dfb56e97ed8c0fd71b7ddeef19c02c205f02e1
SHA256

434124d9f5b5bfe820a8025328bc33566d9392890fd005103bb01cfba05f682d
SHA512

123f3ea324ab60c42abbbc41f2a1b2739f0a3661ce0ae2e73d192da3389b811baf148e9c886c614db12cf043fcdfacb6bb438805d4b8a8cfc616d50c919e326e
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EcN:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_e36c2f1bc0c0dbc13f6689672ded2e1c_cryptolocker
- Size
  
  57KB
- MD5
  
  e36c2f1bc0c0dbc13f6689672ded2e1c
- SHA1
  
  30dfb56e97ed8c0fd71b7ddeef19c02c205f02e1
- SHA256
  
  434124d9f5b5bfe820a8025328bc33566d9392890fd005103bb01cfba05f682d
- SHA512
  
  123f3ea324ab60c42abbbc41f2a1b2739f0a3661ce0ae2e73d192da3389b811baf148e9c886c614db12cf043fcdfacb6bb438805d4b8a8cfc616d50c919e326e
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EcN:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2