e9b9245debb19dee02b6d196290868d2ef6012677d301e520c367b7febb5d428 | Triage

Sharing

General

Target

2024-10-14_6d8108f4c767933e49134bd3db5d1e12_cryptolocker
Size

40KB
Sample

241014-d56hrasaqj
MD5

6d8108f4c767933e49134bd3db5d1e12
SHA1

a271f997fbaa17ad4ed0fd44d1bc15e2b9e135a2
SHA256

e9b9245debb19dee02b6d196290868d2ef6012677d301e520c367b7febb5d428
SHA512

725c3019f32e67023018c68259419bd0284049ecfd6366a69c57cea84a83cc8232623713004130e195572fcd247e7b3483f77a792a8a0b099a361de7c54a58ab
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0xj:X6QFElP6n+gJQMOtEvwDpjBmzDU5xj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_6d8108f4c767933e49134bd3db5d1e12_cryptolocker
- Size
  
  40KB
- MD5
  
  6d8108f4c767933e49134bd3db5d1e12
- SHA1
  
  a271f997fbaa17ad4ed0fd44d1bc15e2b9e135a2
- SHA256
  
  e9b9245debb19dee02b6d196290868d2ef6012677d301e520c367b7febb5d428
- SHA512
  
  725c3019f32e67023018c68259419bd0284049ecfd6366a69c57cea84a83cc8232623713004130e195572fcd247e7b3483f77a792a8a0b099a361de7c54a58ab
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw0xj:X6QFElP6n+gJQMOtEvwDpjBmzDU5xj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2