f6ce026c6a8b4a5a017c4d8094aaaf5d848b115a8fb6eae646b59eef4548b928 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-01_cf2e4ed82cf3f495564c9bab0df79f15_cryptolocker
Size

48KB
Sample

241001-ngnm5s1bjb
MD5

cf2e4ed82cf3f495564c9bab0df79f15
SHA1

2a2de38048fd474d3a4876bb424855240c84ed63
SHA256

f6ce026c6a8b4a5a017c4d8094aaaf5d848b115a8fb6eae646b59eef4548b928
SHA512

411bbf1acc67c6e5784c8a4d91a24bbc274d5c7edc60e4daa495d7c54ad5e0a6a565ae21ca74063f687b9cc54b3fdd7239af676f2b79bff9ebda276722d8d402
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dX+r:V6QFElP6n+gMQMOtEvwDpjyaHaXr+r

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_cf2e4ed82cf3f495564c9bab0df79f15_cryptolocker
- Size
  
  48KB
- MD5
  
  cf2e4ed82cf3f495564c9bab0df79f15
- SHA1
  
  2a2de38048fd474d3a4876bb424855240c84ed63
- SHA256
  
  f6ce026c6a8b4a5a017c4d8094aaaf5d848b115a8fb6eae646b59eef4548b928
- SHA512
  
  411bbf1acc67c6e5784c8a4d91a24bbc274d5c7edc60e4daa495d7c54ad5e0a6a565ae21ca74063f687b9cc54b3fdd7239af676f2b79bff9ebda276722d8d402
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dX+r:V6QFElP6n+gMQMOtEvwDpjyaHaXr+r
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2