cb526bf3c54be93195ee1461e71877da6b6aa1b395acf34ac8626b919a974977 | Triage

Sharing

General

Target

2024-09-21_e484dc2cbf3e3e0cba7d3e2d276701e1_cryptolocker
Size

74KB
Sample

240921-ecgvcstdle
MD5

e484dc2cbf3e3e0cba7d3e2d276701e1
SHA1

5216766dbba09274d92b4039cd729b5875956e20
SHA256

cb526bf3c54be93195ee1461e71877da6b6aa1b395acf34ac8626b919a974977
SHA512

a40086179252b67cfe288c2fbc2156b4e35192d0135d7ca4474346590bca7f049be7e1ce4755475a3e8b2aa64faf87a564c7ffe0805970af7f598f43144c5e90
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RO:vj+jsMQMOtEvwDpj5HZYTjipvF24pE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_e484dc2cbf3e3e0cba7d3e2d276701e1_cryptolocker
- Size
  
  74KB
- MD5
  
  e484dc2cbf3e3e0cba7d3e2d276701e1
- SHA1
  
  5216766dbba09274d92b4039cd729b5875956e20
- SHA256
  
  cb526bf3c54be93195ee1461e71877da6b6aa1b395acf34ac8626b919a974977
- SHA512
  
  a40086179252b67cfe288c2fbc2156b4e35192d0135d7ca4474346590bca7f049be7e1ce4755475a3e8b2aa64faf87a564c7ffe0805970af7f598f43144c5e90
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RO:vj+jsMQMOtEvwDpj5HZYTjipvF24pE
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2