ae32bfe3014958971405d15a751745bbbd5fe75e6935992fa4cbdd620d863fc3 | Triage

Sharing

General

Target

2024-10-18_26c6e0b90ab78630162ae4e1b780cc4b_cryptolocker
Size

64KB
Sample

241018-cwn2nsvakk
MD5

26c6e0b90ab78630162ae4e1b780cc4b
SHA1

93e0f5eb43b766657714c243cda08514f77253c5
SHA256

ae32bfe3014958971405d15a751745bbbd5fe75e6935992fa4cbdd620d863fc3
SHA512

0a5fe845e2afefc34fdd22992c02593d0389536436ddadc1bb63724af217ded3d6aa77688b9b4c5f8fb0239ff329c60a462a18356b5ed748e9f3cca0e503a5b6
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnT5Q:btng54SMLr+/AO/kIhfoKMHdaO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_26c6e0b90ab78630162ae4e1b780cc4b_cryptolocker
- Size
  
  64KB
- MD5
  
  26c6e0b90ab78630162ae4e1b780cc4b
- SHA1
  
  93e0f5eb43b766657714c243cda08514f77253c5
- SHA256
  
  ae32bfe3014958971405d15a751745bbbd5fe75e6935992fa4cbdd620d863fc3
- SHA512
  
  0a5fe845e2afefc34fdd22992c02593d0389536436ddadc1bb63724af217ded3d6aa77688b9b4c5f8fb0239ff329c60a462a18356b5ed748e9f3cca0e503a5b6
- SSDEEP
  
  1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnT5Q:btng54SMLr+/AO/kIhfoKMHdaO
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2