c673e3e72a8fb7aae83245f578abaa379a006ed2341f1ee765ba3ba1f38a950c | Triage

Sharing

General

Target

2024-09-27_6e2a4b59aeed7f6c1472fe4575d1fae6_cryptolocker
Size

51KB
Sample

240927-d6q5fswerc
MD5

6e2a4b59aeed7f6c1472fe4575d1fae6
SHA1

aaf4dfe5200bf7a584439599fd52d756733855d3
SHA256

c673e3e72a8fb7aae83245f578abaa379a006ed2341f1ee765ba3ba1f38a950c
SHA512

e9eb137f9a99319409c2f9b8e8dfefff91fb47544bf36cd856e3353243ad5fc3de20ba30c258dac33218bdb2b5812a4922212b57ee7dec27ce3c8d5438febaf4
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nUI:vj+jsMQMOtEvwDpj5HczerLO04BI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-27_6e2a4b59aeed7f6c1472fe4575d1fae6_cryptolocker
- Size
  
  51KB
- MD5
  
  6e2a4b59aeed7f6c1472fe4575d1fae6
- SHA1
  
  aaf4dfe5200bf7a584439599fd52d756733855d3
- SHA256
  
  c673e3e72a8fb7aae83245f578abaa379a006ed2341f1ee765ba3ba1f38a950c
- SHA512
  
  e9eb137f9a99319409c2f9b8e8dfefff91fb47544bf36cd856e3353243ad5fc3de20ba30c258dac33218bdb2b5812a4922212b57ee7dec27ce3c8d5438febaf4
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nUI:vj+jsMQMOtEvwDpj5HczerLO04BI
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2