06bb7ce395e3fb0b5e6afbfab8949db8cf92f47d2a53803bbca5c806c75ca712 | Triage

Sharing

General

Target

2024-10-01_8dd509c41bbb89c89dc538812ff62f6e_cryptolocker
Size

70KB
Sample

241001-efr5hayhjj
MD5

8dd509c41bbb89c89dc538812ff62f6e
SHA1

e162e42d51cd0e961ec7ef60455d40535de33e75
SHA256

06bb7ce395e3fb0b5e6afbfab8949db8cf92f47d2a53803bbca5c806c75ca712
SHA512

1930129d062fea72b30db123a8ee05f010a8e4f93a3b4a3ab4af49c401a2c05b9da6fc2eedc2b7aacde212372e028c24d9f5120f0d91d0f4c726b78841cfcb78
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLE4:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7g

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_8dd509c41bbb89c89dc538812ff62f6e_cryptolocker
- Size
  
  70KB
- MD5
  
  8dd509c41bbb89c89dc538812ff62f6e
- SHA1
  
  e162e42d51cd0e961ec7ef60455d40535de33e75
- SHA256
  
  06bb7ce395e3fb0b5e6afbfab8949db8cf92f47d2a53803bbca5c806c75ca712
- SHA512
  
  1930129d062fea72b30db123a8ee05f010a8e4f93a3b4a3ab4af49c401a2c05b9da6fc2eedc2b7aacde212372e028c24d9f5120f0d91d0f4c726b78841cfcb78
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLE4:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7g
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2