c32f66a6228053c78924bf26e9d656108600aefd7cd27bce259611cfda5fcce6 | Triage

Sharing

General

Target

2024-10-31_5dea77fa216caf20da8d5d2b25ac6439_cryptolocker
Size

37KB
Sample

241031-kbtenavcqd
MD5

5dea77fa216caf20da8d5d2b25ac6439
SHA1

2cceb9eefdf032c45f0a049798ec93f6f22d597a
SHA256

c32f66a6228053c78924bf26e9d656108600aefd7cd27bce259611cfda5fcce6
SHA512

98bef4d4452ace7b1658bdc7f3254fe32ea7d9892d2e804166abd119725121372d5f1a0c9687eed4b9c34504bd5b7b9bbf0cc746ea7ebf8575ac3371fe8ff5f4
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Ug:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_5dea77fa216caf20da8d5d2b25ac6439_cryptolocker
- Size
  
  37KB
- MD5
  
  5dea77fa216caf20da8d5d2b25ac6439
- SHA1
  
  2cceb9eefdf032c45f0a049798ec93f6f22d597a
- SHA256
  
  c32f66a6228053c78924bf26e9d656108600aefd7cd27bce259611cfda5fcce6
- SHA512
  
  98bef4d4452ace7b1658bdc7f3254fe32ea7d9892d2e804166abd119725121372d5f1a0c9687eed4b9c34504bd5b7b9bbf0cc746ea7ebf8575ac3371fe8ff5f4
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Ug:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2