2e58a9f46fbb433ca45e3c0f2b67851c16debc5ca5b42b1d6baa151fa4286261 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_8a3647d9d5f2ff9a89746bf1d0f6d20c_cryptolocker
Size

60KB
Sample

241017-3xd6zawhkk
MD5

8a3647d9d5f2ff9a89746bf1d0f6d20c
SHA1

57018a8e0654fc94fc5d41c2c09bd4484c3a41e9
SHA256

2e58a9f46fbb433ca45e3c0f2b67851c16debc5ca5b42b1d6baa151fa4286261
SHA512

0809bb15faf62b7e9e8435c4a23c446fe0615a0b6293bcaf296696b4e12fe97a300c7f8b6e765a815ab0ebde942a38bb94f6adfe2761b406fdf84ab6a848e350
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMC:TCjsIOtEvwDpj5HE/OUHnSMB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_8a3647d9d5f2ff9a89746bf1d0f6d20c_cryptolocker
- Size
  
  60KB
- MD5
  
  8a3647d9d5f2ff9a89746bf1d0f6d20c
- SHA1
  
  57018a8e0654fc94fc5d41c2c09bd4484c3a41e9
- SHA256
  
  2e58a9f46fbb433ca45e3c0f2b67851c16debc5ca5b42b1d6baa151fa4286261
- SHA512
  
  0809bb15faf62b7e9e8435c4a23c446fe0615a0b6293bcaf296696b4e12fe97a300c7f8b6e765a815ab0ebde942a38bb94f6adfe2761b406fdf84ab6a848e350
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMC:TCjsIOtEvwDpj5HE/OUHnSMB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2