5c579deb5de170f4b7fb1b6423b743fd69b74862f4bf7b525a946dd51f090378 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-10_52152b77caf4f6459d8a980767cb5c17_cryptolocker
Size

53KB
Sample

241010-g7jzbavgnr
MD5

52152b77caf4f6459d8a980767cb5c17
SHA1

40371f5c641ee4124675353d602dea0299fff2d3
SHA256

5c579deb5de170f4b7fb1b6423b743fd69b74862f4bf7b525a946dd51f090378
SHA512

1d8a36e90b3fc9c3e6a6f9e9042ecc972d903751d9e3bd57d84f0a99fd3084b63fa0825025fff7ddc32d70967d20b9babfd6761c5e3d0ef2b24b675ebd1e916f
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlDA:V6a+pOtEvwDpjvDi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_52152b77caf4f6459d8a980767cb5c17_cryptolocker
- Size
  
  53KB
- MD5
  
  52152b77caf4f6459d8a980767cb5c17
- SHA1
  
  40371f5c641ee4124675353d602dea0299fff2d3
- SHA256
  
  5c579deb5de170f4b7fb1b6423b743fd69b74862f4bf7b525a946dd51f090378
- SHA512
  
  1d8a36e90b3fc9c3e6a6f9e9042ecc972d903751d9e3bd57d84f0a99fd3084b63fa0825025fff7ddc32d70967d20b9babfd6761c5e3d0ef2b24b675ebd1e916f
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlDA:V6a+pOtEvwDpjvDi
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2