6cc3ca7346eeb73041be17b64e3c7ad61350998a7ccf671549ac6304f61b4d0f | Triage

Sharing

General

Target

2024-11-21_9809e01b0be78ff0bd99c426b968ac57_cryptolocker
Size

44KB
Sample

241121-hnxxhazglp
MD5

9809e01b0be78ff0bd99c426b968ac57
SHA1

c22b262849656256bc0f5998a72bd9e63a948c07
SHA256

6cc3ca7346eeb73041be17b64e3c7ad61350998a7ccf671549ac6304f61b4d0f
SHA512

f70747cb9f9e8629a7e6a2c1256dd9854bc4dafb19dbfaa5b1d4e22d716c32ce2481ba79501121f8e9239c1d64da6fe37a808183f37bbd1712b729e0a338a6b7
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TWg:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_9809e01b0be78ff0bd99c426b968ac57_cryptolocker
- Size
  
  44KB
- MD5
  
  9809e01b0be78ff0bd99c426b968ac57
- SHA1
  
  c22b262849656256bc0f5998a72bd9e63a948c07
- SHA256
  
  6cc3ca7346eeb73041be17b64e3c7ad61350998a7ccf671549ac6304f61b4d0f
- SHA512
  
  f70747cb9f9e8629a7e6a2c1256dd9854bc4dafb19dbfaa5b1d4e22d716c32ce2481ba79501121f8e9239c1d64da6fe37a808183f37bbd1712b729e0a338a6b7
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TWg:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2