562f82fdd9d5834c5018ecef3611172b54954bf5f13e9a2d0d4df19e3c5a34ba | Triage

Sharing

General

Target

2024-10-05_596bf6af697fb406f7a883e55119b8d9_cryptolocker
Size

51KB
Sample

241005-zm8q2sxbqh
MD5

596bf6af697fb406f7a883e55119b8d9
SHA1

744a35192d93d39a80f08619e325efa95feb74c6
SHA256

562f82fdd9d5834c5018ecef3611172b54954bf5f13e9a2d0d4df19e3c5a34ba
SHA512

19da224d8b0c509ec86813f224bd6ca5805ebbdfc2207ffb346a009219f3c8833194764ba301b71a710bd784df927cc58a4e227a7f9458a8cca719ea9649c73f
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojaS2y9:V6a+pOtEvwDpjK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-05_596bf6af697fb406f7a883e55119b8d9_cryptolocker
- Size
  
  51KB
- MD5
  
  596bf6af697fb406f7a883e55119b8d9
- SHA1
  
  744a35192d93d39a80f08619e325efa95feb74c6
- SHA256
  
  562f82fdd9d5834c5018ecef3611172b54954bf5f13e9a2d0d4df19e3c5a34ba
- SHA512
  
  19da224d8b0c509ec86813f224bd6ca5805ebbdfc2207ffb346a009219f3c8833194764ba301b71a710bd784df927cc58a4e227a7f9458a8cca719ea9649c73f
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojaS2y9:V6a+pOtEvwDpjK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2