0ee5e2df7cf2663b0be83a95fbf6d59a51d5bbf1390f503628e93f6925bf22ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_e5246d20b379d2a98e8076def91b29a3_cryptolocker
Size

72KB
Sample

241013-hccgesxfrr
MD5

e5246d20b379d2a98e8076def91b29a3
SHA1

f4e3dde334e053d7c56a6c8fe9d2e77ed0b9cc64
SHA256

0ee5e2df7cf2663b0be83a95fbf6d59a51d5bbf1390f503628e93f6925bf22ed
SHA512

d6718d0a63fc68686b6295422b5384085d2fe67d98fb9a696fcdb7782b428aedf06bcef2df99826defd81f98088e0ae2d90271ad7af8596cca1c9eff8e11e7df
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOV:DW60sllyWOtEvwDpjwF85u

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_e5246d20b379d2a98e8076def91b29a3_cryptolocker
- Size
  
  72KB
- MD5
  
  e5246d20b379d2a98e8076def91b29a3
- SHA1
  
  f4e3dde334e053d7c56a6c8fe9d2e77ed0b9cc64
- SHA256
  
  0ee5e2df7cf2663b0be83a95fbf6d59a51d5bbf1390f503628e93f6925bf22ed
- SHA512
  
  d6718d0a63fc68686b6295422b5384085d2fe67d98fb9a696fcdb7782b428aedf06bcef2df99826defd81f98088e0ae2d90271ad7af8596cca1c9eff8e11e7df
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOV:DW60sllyWOtEvwDpjwF85u
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2