00ec21b6c701d5043c54c39c5787cbdd9a5432f858e87b374100015417421f20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-29_91a8f4cdd1553a662c0f4b76ea89f7fd_cryptolocker
Size

46KB
Sample

240929-hkv9haweme
MD5

91a8f4cdd1553a662c0f4b76ea89f7fd
SHA1

626549f05ad7160772ce0a9c8ec05040afbf2ff0
SHA256

00ec21b6c701d5043c54c39c5787cbdd9a5432f858e87b374100015417421f20
SHA512

4e1b2034fde83834d7de43355cdec16f42427e3bdd98f22ce4a7bab7c6f5d74d94688ff8b6c4ac8fb339fe8b75384d4b31386d576464033e224cd4941a7873b0
SSDEEP

768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBhWl:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6nq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-29_91a8f4cdd1553a662c0f4b76ea89f7fd_cryptolocker
- Size
  
  46KB
- MD5
  
  91a8f4cdd1553a662c0f4b76ea89f7fd
- SHA1
  
  626549f05ad7160772ce0a9c8ec05040afbf2ff0
- SHA256
  
  00ec21b6c701d5043c54c39c5787cbdd9a5432f858e87b374100015417421f20
- SHA512
  
  4e1b2034fde83834d7de43355cdec16f42427e3bdd98f22ce4a7bab7c6f5d74d94688ff8b6c4ac8fb339fe8b75384d4b31386d576464033e224cd4941a7873b0
- SSDEEP
  
  768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBhWl:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6nq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2