39e2dfda437d3024ba7f46de362132d9289629edc9371179bcac3465b23ee7d9 | Triage

Sharing

General

Target

2024-09-21_e6103df700939edb55aed313e5fcca97_cryptolocker
Size

46KB
Sample

240921-eck7satemm
MD5

e6103df700939edb55aed313e5fcca97
SHA1

3ca2ac16406d9d4a179786ab8a1dfd728c00a45c
SHA256

39e2dfda437d3024ba7f46de362132d9289629edc9371179bcac3465b23ee7d9
SHA512

636bf7261921aacbe042f1d6ed02489448d6a9fbd3197a33ccb69bcbd4f9ddab520c0d7ff95367b4a3beeebb4485952b8d7ded0d2afe0ba1bfc7227bc933de8e
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8Jps:bm74zYcgT/EkM0ryfjPdQZJ+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_e6103df700939edb55aed313e5fcca97_cryptolocker
- Size
  
  46KB
- MD5
  
  e6103df700939edb55aed313e5fcca97
- SHA1
  
  3ca2ac16406d9d4a179786ab8a1dfd728c00a45c
- SHA256
  
  39e2dfda437d3024ba7f46de362132d9289629edc9371179bcac3465b23ee7d9
- SHA512
  
  636bf7261921aacbe042f1d6ed02489448d6a9fbd3197a33ccb69bcbd4f9ddab520c0d7ff95367b4a3beeebb4485952b8d7ded0d2afe0ba1bfc7227bc933de8e
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8Jps:bm74zYcgT/EkM0ryfjPdQZJ+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2