ef75f9515e00cb85f59c3193f64c20e24a26a6768a9d111878caaadc676347be | Triage

Sharing

General

Target

2024-09-21_d179b21021a83f9b7cdb2a35f9d0b44c_cryptolocker
Size

56KB
Sample

240921-ebenlstcqb
MD5

d179b21021a83f9b7cdb2a35f9d0b44c
SHA1

74bf7d41d3e62b98b526d6d962ecad66bc879ae0
SHA256

ef75f9515e00cb85f59c3193f64c20e24a26a6768a9d111878caaadc676347be
SHA512

992bd5b70234652bba56961f99b0a9ad654ac18c7e17632af756179be022b67738f80295ca6e7fa8a35a7f7969219304755afb4551e013a8c6614a70f9a8d469
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzp0ojjkU:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_d179b21021a83f9b7cdb2a35f9d0b44c_cryptolocker
- Size
  
  56KB
- MD5
  
  d179b21021a83f9b7cdb2a35f9d0b44c
- SHA1
  
  74bf7d41d3e62b98b526d6d962ecad66bc879ae0
- SHA256
  
  ef75f9515e00cb85f59c3193f64c20e24a26a6768a9d111878caaadc676347be
- SHA512
  
  992bd5b70234652bba56961f99b0a9ad654ac18c7e17632af756179be022b67738f80295ca6e7fa8a35a7f7969219304755afb4551e013a8c6614a70f9a8d469
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzp0ojjkU:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2