bba5b1824f78260116e8fe1e2ef5b885b806623b34594a14718111bb5cb23a14 | Triage

Sharing

General

Target

2024-11-21_6d494567b0bc72dcfdeb439473b7ffc8_cryptolocker
Size

79KB
Sample

241121-jcp8yszlgz
MD5

6d494567b0bc72dcfdeb439473b7ffc8
SHA1

ff78f6c963ab195d62e9c0bd682c4f81f8d1d42f
SHA256

bba5b1824f78260116e8fe1e2ef5b885b806623b34594a14718111bb5cb23a14
SHA512

464d53eb4dcc5dcab69ac1ab0950785656655c6c7bbe60914d161e74618b69c081473ea49054c829f7df9edf09c859c15791503d595593866196c73c5b1345be
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktD:X6a+SOtEvwDpjBZYvQd2S

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_6d494567b0bc72dcfdeb439473b7ffc8_cryptolocker
- Size
  
  79KB
- MD5
  
  6d494567b0bc72dcfdeb439473b7ffc8
- SHA1
  
  ff78f6c963ab195d62e9c0bd682c4f81f8d1d42f
- SHA256
  
  bba5b1824f78260116e8fe1e2ef5b885b806623b34594a14718111bb5cb23a14
- SHA512
  
  464d53eb4dcc5dcab69ac1ab0950785656655c6c7bbe60914d161e74618b69c081473ea49054c829f7df9edf09c859c15791503d595593866196c73c5b1345be
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktD:X6a+SOtEvwDpjBZYvQd2S
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2