94cac3fbb5a93daf24ea0d5608a4f12b86451879ed5e61e833fcdc336f6576ec | Triage

Sharing

General

Target

2024-10-06_5c6619d6384d48fcc55fa21cc449e70b_cryptolocker
Size

89KB
Sample

241006-hgsn7svckj
MD5

5c6619d6384d48fcc55fa21cc449e70b
SHA1

970d98fd0f67c233fe05306f7b1f3b62fdcf8f86
SHA256

94cac3fbb5a93daf24ea0d5608a4f12b86451879ed5e61e833fcdc336f6576ec
SHA512

2fce8ac035bae709bb5029131da685724cf09c3dbc921c8a3606bcbc563e3700070e8c871a8f553df557c34cd5f7f0c82dbe21ca218e15c81224362f14dff99e
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWNVtZI:V6a+pOtEvwDpjt5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_5c6619d6384d48fcc55fa21cc449e70b_cryptolocker
- Size
  
  89KB
- MD5
  
  5c6619d6384d48fcc55fa21cc449e70b
- SHA1
  
  970d98fd0f67c233fe05306f7b1f3b62fdcf8f86
- SHA256
  
  94cac3fbb5a93daf24ea0d5608a4f12b86451879ed5e61e833fcdc336f6576ec
- SHA512
  
  2fce8ac035bae709bb5029131da685724cf09c3dbc921c8a3606bcbc563e3700070e8c871a8f553df557c34cd5f7f0c82dbe21ca218e15c81224362f14dff99e
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWNVtZI:V6a+pOtEvwDpjt5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2