2e4955db3591143ab0bd1f0329193e0a1f780c7f92d20efdbdd8fef3bd199f82 | Triage

Sharing

General

Target

2024-09-25_52bbca54a800fdfef9c4b8cf437c4a46_cryptolocker
Size

30KB
Sample

240925-cv6v4azbkm
MD5

52bbca54a800fdfef9c4b8cf437c4a46
SHA1

d9ac9fd9fb1a4a6afa0909844bfeb3ea7c62c47c
SHA256

2e4955db3591143ab0bd1f0329193e0a1f780c7f92d20efdbdd8fef3bd199f82
SHA512

829bceabc278d60176b20a9ff9c4888b820200a0535a02c5608d732b474d6ec74cbb2398a9324f87156dd3de8d0b75ac62c456ff5956d7cd99a992fbc9a5593e
SSDEEP

384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexyo:bA74zYcgT/Ekd0ryfjPIunFo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-25_52bbca54a800fdfef9c4b8cf437c4a46_cryptolocker
- Size
  
  30KB
- MD5
  
  52bbca54a800fdfef9c4b8cf437c4a46
- SHA1
  
  d9ac9fd9fb1a4a6afa0909844bfeb3ea7c62c47c
- SHA256
  
  2e4955db3591143ab0bd1f0329193e0a1f780c7f92d20efdbdd8fef3bd199f82
- SHA512
  
  829bceabc278d60176b20a9ff9c4888b820200a0535a02c5608d732b474d6ec74cbb2398a9324f87156dd3de8d0b75ac62c456ff5956d7cd99a992fbc9a5593e
- SSDEEP
  
  384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexyo:bA74zYcgT/Ekd0ryfjPIunFo
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2