5212b230b00144cf45653e5cdf20bf5b20c3531ec4d89ad22a7b6f7b45e23f12 | Triage

Sharing

General

Target

2024-09-21_6510e2a8ea72ed1ca41ab3b01eaf1306_cryptolocker
Size

43KB
Sample

240921-h7xqva1cpj
MD5

6510e2a8ea72ed1ca41ab3b01eaf1306
SHA1

c88f4aa9b651a08a77139738bb1c50d62d499eef
SHA256

5212b230b00144cf45653e5cdf20bf5b20c3531ec4d89ad22a7b6f7b45e23f12
SHA512

7e7e9f08c1cfb0c0be779e8be5a29b5e5bcdf098f8d004ab150111512d742433e917d39cd2945783cd539d581c76e8bf7eca8f25bea5c57e6b6ccdd48cc3ae1b
SSDEEP

768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCOl:bA6YcA/X6G0W143Qzl

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_6510e2a8ea72ed1ca41ab3b01eaf1306_cryptolocker
- Size
  
  43KB
- MD5
  
  6510e2a8ea72ed1ca41ab3b01eaf1306
- SHA1
  
  c88f4aa9b651a08a77139738bb1c50d62d499eef
- SHA256
  
  5212b230b00144cf45653e5cdf20bf5b20c3531ec4d89ad22a7b6f7b45e23f12
- SHA512
  
  7e7e9f08c1cfb0c0be779e8be5a29b5e5bcdf098f8d004ab150111512d742433e917d39cd2945783cd539d581c76e8bf7eca8f25bea5c57e6b6ccdd48cc3ae1b
- SSDEEP
  
  768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCOl:bA6YcA/X6G0W143Qzl
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2