e5acfca561cd409e4de35d9ac1154fce16569c14385ca116dccf4e7dfe1e3bfd | Triage

Sharing

General

Target

2024-11-20_61f7d39c9bbd2ca976c9b32fa42ac8fa_cryptolocker
Size

25KB
Sample

241120-dz674azkfx
MD5

61f7d39c9bbd2ca976c9b32fa42ac8fa
SHA1

ad5544facbe4350aaa055ba4459033aa1fc1c165
SHA256

e5acfca561cd409e4de35d9ac1154fce16569c14385ca116dccf4e7dfe1e3bfd
SHA512

16d2c6c3d45d48220335a3d3cce8cdad8ccd55b39627500ffe5d4b46546f2a6b6d7bdfef8b44933f3511a41cb11f9fa62cb708394d616c38a3578bcbf23efb52
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/P4QtOOtEvwDpjq:ZzFbxmLP4QMOtEvwDpjq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_61f7d39c9bbd2ca976c9b32fa42ac8fa_cryptolocker
- Size
  
  25KB
- MD5
  
  61f7d39c9bbd2ca976c9b32fa42ac8fa
- SHA1
  
  ad5544facbe4350aaa055ba4459033aa1fc1c165
- SHA256
  
  e5acfca561cd409e4de35d9ac1154fce16569c14385ca116dccf4e7dfe1e3bfd
- SHA512
  
  16d2c6c3d45d48220335a3d3cce8cdad8ccd55b39627500ffe5d4b46546f2a6b6d7bdfef8b44933f3511a41cb11f9fa62cb708394d616c38a3578bcbf23efb52
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/P4QtOOtEvwDpjq:ZzFbxmLP4QMOtEvwDpjq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2