1abff6a3874ee79411b558b51534fcbdd5372756237014f255a81128ff238151 | Triage

Sharing

General

Target

2025-03-21_04f74a41da8087182c1331038485b65d_cryptolocker
Size

90KB
Sample

250321-jy1xksyqy9
MD5

04f74a41da8087182c1331038485b65d
SHA1

dfcd96c4c04f1739780c38e3ae817562bcccf488
SHA256

1abff6a3874ee79411b558b51534fcbdd5372756237014f255a81128ff238151
SHA512

13f57253521166f0a520970571be4125e6f04f88256164de30565db297a2a62115ed93c144b7f0e5874d7059e9d80a885626e36d69646dba887db5a31e1cb319
SSDEEP

1536:Z6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgcfn:Z6a+pOtEvwDpjtzu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2025-03-21_04f74a41da8087182c1331038485b65d_cryptolocker
- Size
  
  90KB
- MD5
  
  04f74a41da8087182c1331038485b65d
- SHA1
  
  dfcd96c4c04f1739780c38e3ae817562bcccf488
- SHA256
  
  1abff6a3874ee79411b558b51534fcbdd5372756237014f255a81128ff238151
- SHA512
  
  13f57253521166f0a520970571be4125e6f04f88256164de30565db297a2a62115ed93c144b7f0e5874d7059e9d80a885626e36d69646dba887db5a31e1cb319
- SSDEEP
  
  1536:Z6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgcfn:Z6a+pOtEvwDpjtzu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2