66f78a5607bedbe6640e338d27964fb3722c876004c5874b1771814f51b32c72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-19_a9fe5d552f24ec985517ad471ffcd69e_cryptolocker
Size

39KB
Sample

240919-rr7esatekk
MD5

a9fe5d552f24ec985517ad471ffcd69e
SHA1

7bef0cdefd8c13d7560565582e0b2d03f7272e7c
SHA256

66f78a5607bedbe6640e338d27964fb3722c876004c5874b1771814f51b32c72
SHA512

a92b3678465a91e41724197aab031b0a27bd0fac67d2ece471a5c2fcbad89db3c958ac82e08978aee9cb4e0e8a360fb79f573584629730b25eee07f71dcbac9b
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx7:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_a9fe5d552f24ec985517ad471ffcd69e_cryptolocker
- Size
  
  39KB
- MD5
  
  a9fe5d552f24ec985517ad471ffcd69e
- SHA1
  
  7bef0cdefd8c13d7560565582e0b2d03f7272e7c
- SHA256
  
  66f78a5607bedbe6640e338d27964fb3722c876004c5874b1771814f51b32c72
- SHA512
  
  a92b3678465a91e41724197aab031b0a27bd0fac67d2ece471a5c2fcbad89db3c958ac82e08978aee9cb4e0e8a360fb79f573584629730b25eee07f71dcbac9b
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx7:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2