c20300516b4c4475e4a7a010f00976da950e7af258a07aa74526ab94488e0409 | Triage

Sharing

General

Target

2024-10-17_e652e3bddc276cd5076d14e773410c6d_cryptolocker
Size

75KB
Sample

241017-t22y6avbpg
MD5

e652e3bddc276cd5076d14e773410c6d
SHA1

33741f3ce5f3c2004a04a36a0692cc96b8cdb1d7
SHA256

c20300516b4c4475e4a7a010f00976da950e7af258a07aa74526ab94488e0409
SHA512

d88f6f3535ac5b95d58fdb5840d3d9f3ac6d2fb1009f5cd9c05aa19e31220996676e5e4a33fd24bc85029b64acdd225577968a76fa4c33084dfd1b7fc401b8b9
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufE:vCjsIOtEvwDpj5H9YvQd2w

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_e652e3bddc276cd5076d14e773410c6d_cryptolocker
- Size
  
  75KB
- MD5
  
  e652e3bddc276cd5076d14e773410c6d
- SHA1
  
  33741f3ce5f3c2004a04a36a0692cc96b8cdb1d7
- SHA256
  
  c20300516b4c4475e4a7a010f00976da950e7af258a07aa74526ab94488e0409
- SHA512
  
  d88f6f3535ac5b95d58fdb5840d3d9f3ac6d2fb1009f5cd9c05aa19e31220996676e5e4a33fd24bc85029b64acdd225577968a76fa4c33084dfd1b7fc401b8b9
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufE:vCjsIOtEvwDpj5H9YvQd2w
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2