6ce04c1c322e89a841bb09091fc075f49cf8a62ff6a90b82972624ba5af553fb | Triage

Sharing

General

Target

2024-10-15_b850a1ab44007ac92c8e22351510ff53_cryptolocker
Size

5.5MB
Sample

241015-cy2qjsteqm
MD5

b850a1ab44007ac92c8e22351510ff53
SHA1

3123fb1f5056e94869f59eb7cee7bcd541ac1b55
SHA256

6ce04c1c322e89a841bb09091fc075f49cf8a62ff6a90b82972624ba5af553fb
SHA512

482b120f0942f45e3d9a045ab173d5e39fa290a6e3375d23d974d0d49a27a72bbf8709466ce525f8c2389cdd9775a67f54f3499d94814755c0f6da5ebc40f1ba
SSDEEP

98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+UfJ:otTvgz73XMpxDbcwYvt3sFa4OJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-15_b850a1ab44007ac92c8e22351510ff53_cryptolocker
- Size
  
  5.5MB
- MD5
  
  b850a1ab44007ac92c8e22351510ff53
- SHA1
  
  3123fb1f5056e94869f59eb7cee7bcd541ac1b55
- SHA256
  
  6ce04c1c322e89a841bb09091fc075f49cf8a62ff6a90b82972624ba5af553fb
- SHA512
  
  482b120f0942f45e3d9a045ab173d5e39fa290a6e3375d23d974d0d49a27a72bbf8709466ce525f8c2389cdd9775a67f54f3499d94814755c0f6da5ebc40f1ba
- SSDEEP
  
  98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+UfJ:otTvgz73XMpxDbcwYvt3sFa4OJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2