e635554ed2acb52e5aee78057ab523b96533776455bf69487f14c5fc12039ccb | Triage

Sharing

General

Target

2024-10-06_fc36e9c9de3fb0bea5e0e8c5294eb01d_cryptolocker
Size

75KB
Sample

241006-dkybms1cql
MD5

fc36e9c9de3fb0bea5e0e8c5294eb01d
SHA1

fb3c4aac2a3540a233b15c5827c54d67e43a941e
SHA256

e635554ed2acb52e5aee78057ab523b96533776455bf69487f14c5fc12039ccb
SHA512

584f83169c9d499fd736b46c056452a395782a508c5263863a092c901cd7de1e83ab0b38e096f3fb6054118cc9479ec7e3863a8f259d687c0dd51d23af4dc53b
SSDEEP

768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsrx:u6QFElP6n+gWMOtEvwDpjJGYQbrx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_fc36e9c9de3fb0bea5e0e8c5294eb01d_cryptolocker
- Size
  
  75KB
- MD5
  
  fc36e9c9de3fb0bea5e0e8c5294eb01d
- SHA1
  
  fb3c4aac2a3540a233b15c5827c54d67e43a941e
- SHA256
  
  e635554ed2acb52e5aee78057ab523b96533776455bf69487f14c5fc12039ccb
- SHA512
  
  584f83169c9d499fd736b46c056452a395782a508c5263863a092c901cd7de1e83ab0b38e096f3fb6054118cc9479ec7e3863a8f259d687c0dd51d23af4dc53b
- SSDEEP
  
  768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsrx:u6QFElP6n+gWMOtEvwDpjJGYQbrx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2