ec283e7f58db98f6287fdf61e4cf65650540a917415aa88e63a3405cded81501 | Triage

Sharing

General

Target

2025-03-21_cb1ff66299d8cea4d00c14fabd73c657_cryptolocker
Size

25KB
Sample

250321-jy4y8syqz2
MD5

cb1ff66299d8cea4d00c14fabd73c657
SHA1

c074d6f60cc419466daed6d4cdc017063f31c008
SHA256

ec283e7f58db98f6287fdf61e4cf65650540a917415aa88e63a3405cded81501
SHA512

82e4fd178a8a0cfcbf66656898c5bb1cefff11433224427ea911daa9e6882a72ec335fca55d5b10ede0b6be92b2756d9548f48eb5e088fe36b9ea976ee3f8831
SSDEEP

384:2pzt9rFQeKoOz/IHKhJfV8WcU+9Qi/zz47WmeXqA:2pz3hPKFzwHgJ9H/+VXRJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2025-03-21_cb1ff66299d8cea4d00c14fabd73c657_cryptolocker
- Size
  
  25KB
- MD5
  
  cb1ff66299d8cea4d00c14fabd73c657
- SHA1
  
  c074d6f60cc419466daed6d4cdc017063f31c008
- SHA256
  
  ec283e7f58db98f6287fdf61e4cf65650540a917415aa88e63a3405cded81501
- SHA512
  
  82e4fd178a8a0cfcbf66656898c5bb1cefff11433224427ea911daa9e6882a72ec335fca55d5b10ede0b6be92b2756d9548f48eb5e088fe36b9ea976ee3f8831
- SSDEEP
  
  384:2pzt9rFQeKoOz/IHKhJfV8WcU+9Qi/zz47WmeXqA:2pz3hPKFzwHgJ9H/+VXRJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2