5a028dda9aa6b03be35b6d4022ac1b6da328761d00a73d3cfc41fbeded8e4e48 | Triage

Sharing

General

Target

2024-10-09_c3627c42d88edb97968d2266ff377bb2_cryptolocker
Size

46KB
Sample

241009-hy6x6awdpd
MD5

c3627c42d88edb97968d2266ff377bb2
SHA1

814292cbcb21667c1b9a1ee537e7b056779a5e92
SHA256

5a028dda9aa6b03be35b6d4022ac1b6da328761d00a73d3cfc41fbeded8e4e48
SHA512

bcc422202f62fb15677cf2f6d4ab4ef74d1bfe85080af3b70e29fc06e2514c6fdf046cdca1e08a30ba32ad42eb99d66adf94d883459476397deab35e30fba51f
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0LHumA:bCDOw9aMDooc+vAlXnA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_c3627c42d88edb97968d2266ff377bb2_cryptolocker
- Size
  
  46KB
- MD5
  
  c3627c42d88edb97968d2266ff377bb2
- SHA1
  
  814292cbcb21667c1b9a1ee537e7b056779a5e92
- SHA256
  
  5a028dda9aa6b03be35b6d4022ac1b6da328761d00a73d3cfc41fbeded8e4e48
- SHA512
  
  bcc422202f62fb15677cf2f6d4ab4ef74d1bfe85080af3b70e29fc06e2514c6fdf046cdca1e08a30ba32ad42eb99d66adf94d883459476397deab35e30fba51f
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0LHumA:bCDOw9aMDooc+vAlXnA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2