d6fa84d6aa831d45d18cebc729dc9acc4f0429c10ee0bdb983960df16cca3976 | Triage

Sharing

General

Target

2024-10-06_bf6094b20b9ef644e53ccd173204e606_cryptolocker
Size

63KB
Sample

241006-f9bv2stenl
MD5

bf6094b20b9ef644e53ccd173204e606
SHA1

89751d66541570436f67240e5917be215ea5b4f5
SHA256

d6fa84d6aa831d45d18cebc729dc9acc4f0429c10ee0bdb983960df16cca3976
SHA512

fd199c070525a9d29c5c803b47188b820b707e4e957a716dee5a3b9f982a1b61c7bae8a2b8eb5c9147eb45c69baa9d99bce637f7ec0a55ea895bfa254e6dba6b
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnxq:btng54SMLr+/AO/kIhfoKMHdao

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_bf6094b20b9ef644e53ccd173204e606_cryptolocker
- Size
  
  63KB
- MD5
  
  bf6094b20b9ef644e53ccd173204e606
- SHA1
  
  89751d66541570436f67240e5917be215ea5b4f5
- SHA256
  
  d6fa84d6aa831d45d18cebc729dc9acc4f0429c10ee0bdb983960df16cca3976
- SHA512
  
  fd199c070525a9d29c5c803b47188b820b707e4e957a716dee5a3b9f982a1b61c7bae8a2b8eb5c9147eb45c69baa9d99bce637f7ec0a55ea895bfa254e6dba6b
- SSDEEP
  
  1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnxq:btng54SMLr+/AO/kIhfoKMHdao
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2