cdefc730452fe0df898cf669aade520558da9cb4d961cf6bb69cbb0114c76529 | Triage

Sharing

General

Target

2024-09-28_6ce96cb6585b0b8679e6d910c4ee6ef1_cryptolocker
Size

33KB
Sample

240928-cyfhbavcnh
MD5

6ce96cb6585b0b8679e6d910c4ee6ef1
SHA1

8ba3d093038ba081a7932b7c06dda71a6b65f0f1
SHA256

cdefc730452fe0df898cf669aade520558da9cb4d961cf6bb69cbb0114c76529
SHA512

40f6a6de57adec82bb67bbf27606f840b4570651ec04d5643ab4361e6b805d49ea8521b18bb4bed03706b71f254af674bc3e6862e9012b19dd9c98a9fc01409f
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNwB6Usa:btB9g/WItCSsAGjX7e9NKN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-28_6ce96cb6585b0b8679e6d910c4ee6ef1_cryptolocker
- Size
  
  33KB
- MD5
  
  6ce96cb6585b0b8679e6d910c4ee6ef1
- SHA1
  
  8ba3d093038ba081a7932b7c06dda71a6b65f0f1
- SHA256
  
  cdefc730452fe0df898cf669aade520558da9cb4d961cf6bb69cbb0114c76529
- SHA512
  
  40f6a6de57adec82bb67bbf27606f840b4570651ec04d5643ab4361e6b805d49ea8521b18bb4bed03706b71f254af674bc3e6862e9012b19dd9c98a9fc01409f
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNwB6Usa:btB9g/WItCSsAGjX7e9NKN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2