5572753aeb90e462bddbc4c591a633a1a1e5499849db6a294beb952bbc699796 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-05_6252ea7032d20282e7eb489732ef6b00_cryptolocker
Size

51KB
Sample

241005-zdefvasakq
MD5

6252ea7032d20282e7eb489732ef6b00
SHA1

3061b5968256d4e070ff7a06ec462a1fb55b002d
SHA256

5572753aeb90e462bddbc4c591a633a1a1e5499849db6a294beb952bbc699796
SHA512

8ccd044d896b0ccdec4f0c02a30adbb7b279c44fabd3016cb5863d899078b035f9dd47e6a1f8326097fa21aa5b40d2b521f2c02401bafd4bf16f56c29ceb2164
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvsTS:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvIS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-05_6252ea7032d20282e7eb489732ef6b00_cryptolocker
- Size
  
  51KB
- MD5
  
  6252ea7032d20282e7eb489732ef6b00
- SHA1
  
  3061b5968256d4e070ff7a06ec462a1fb55b002d
- SHA256
  
  5572753aeb90e462bddbc4c591a633a1a1e5499849db6a294beb952bbc699796
- SHA512
  
  8ccd044d896b0ccdec4f0c02a30adbb7b279c44fabd3016cb5863d899078b035f9dd47e6a1f8326097fa21aa5b40d2b521f2c02401bafd4bf16f56c29ceb2164
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvsTS:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvIS
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2