ed2cc54cb6a36850573d4d7f1798157ced22d9ff318bac3cd37868c1676f6495 | Triage

Sharing

General

Target

2024-09-25_87850e44751169c4e3d1fcd8d53def21_cryptolocker
Size

63KB
Sample

240925-j9s14sxgrf
MD5

87850e44751169c4e3d1fcd8d53def21
SHA1

9aa81b37d185a70f49c20241d996560391f61baa
SHA256

ed2cc54cb6a36850573d4d7f1798157ced22d9ff318bac3cd37868c1676f6495
SHA512

1009169b131be6e52b55207a1f02c93890ed3d1beaccb517e4b35a8b2f32b308c4b08e712375ea8c9cb14c93fb3539add213917ab7ab74addd0e9047315e1606
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnx9:btng54SMLr+/AO/kIhfoKMHdar

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-25_87850e44751169c4e3d1fcd8d53def21_cryptolocker
- Size
  
  63KB
- MD5
  
  87850e44751169c4e3d1fcd8d53def21
- SHA1
  
  9aa81b37d185a70f49c20241d996560391f61baa
- SHA256
  
  ed2cc54cb6a36850573d4d7f1798157ced22d9ff318bac3cd37868c1676f6495
- SHA512
  
  1009169b131be6e52b55207a1f02c93890ed3d1beaccb517e4b35a8b2f32b308c4b08e712375ea8c9cb14c93fb3539add213917ab7ab74addd0e9047315e1606
- SSDEEP
  
  1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnx9:btng54SMLr+/AO/kIhfoKMHdar
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2