594501e86c78d26557b9a6488dcf8428b3b55e19cbaef7022495c81ac0ec8f25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-02_55867f276354b9f7019430cce2321db0_cryptolocker
Size

35KB
Sample

241002-e2re4a1bqa
MD5

55867f276354b9f7019430cce2321db0
SHA1

199f51884229bb3fbde072b880e225c3483b2107
SHA256

594501e86c78d26557b9a6488dcf8428b3b55e19cbaef7022495c81ac0ec8f25
SHA512

a2a9478b254ea0d94cf8799455be2949d4ca61787635b0cd284de76f5be5c07f46f4e4a813c6a2c93bc61d7861380ae2d1b3da7b79df788154d2e82c981aca1d
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5/1D8:bgX4zYcgTEu6QOaryfjqDDw3sCu5/1D8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-02_55867f276354b9f7019430cce2321db0_cryptolocker
- Size
  
  35KB
- MD5
  
  55867f276354b9f7019430cce2321db0
- SHA1
  
  199f51884229bb3fbde072b880e225c3483b2107
- SHA256
  
  594501e86c78d26557b9a6488dcf8428b3b55e19cbaef7022495c81ac0ec8f25
- SHA512
  
  a2a9478b254ea0d94cf8799455be2949d4ca61787635b0cd284de76f5be5c07f46f4e4a813c6a2c93bc61d7861380ae2d1b3da7b79df788154d2e82c981aca1d
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5/1D8:bgX4zYcgTEu6QOaryfjqDDw3sCu5/1D8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2