a875b37040f21491a8d65e49f92a156b13f1d14e6c601f79d18188debadcdc5d | Triage

Sharing

General

Target

2025-03-21_c27dcd15aedc2d37e074bd56575625c1_cryptolocker
Size

61KB
Sample

250321-jyqfvayqy7
MD5

c27dcd15aedc2d37e074bd56575625c1
SHA1

cdbfba65bf8443781f7422440c2bdc80ca725940
SHA256

a875b37040f21491a8d65e49f92a156b13f1d14e6c601f79d18188debadcdc5d
SHA512

b7b17daefeb321db69e0bb277225b23f2d42abc9f2c6e06e633643a60cba18469544c18ee237b9357580c12a8560f4d9c735098eea01f4fc9087881693eb1400
SSDEEP

768:bYv9g/WItCSsAGmXWhaI9cZnIe9N0hunrknljKrCY1a:bYv9g/xtCSDx6A7f1rksrx1a

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2025-03-21_c27dcd15aedc2d37e074bd56575625c1_cryptolocker
- Size
  
  61KB
- MD5
  
  c27dcd15aedc2d37e074bd56575625c1
- SHA1
  
  cdbfba65bf8443781f7422440c2bdc80ca725940
- SHA256
  
  a875b37040f21491a8d65e49f92a156b13f1d14e6c601f79d18188debadcdc5d
- SHA512
  
  b7b17daefeb321db69e0bb277225b23f2d42abc9f2c6e06e633643a60cba18469544c18ee237b9357580c12a8560f4d9c735098eea01f4fc9087881693eb1400
- SSDEEP
  
  768:bYv9g/WItCSsAGmXWhaI9cZnIe9N0hunrknljKrCY1a:bYv9g/xtCSDx6A7f1rksrx1a
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2