64dcdad103709b1b94676dec244fe1fab3ac7373e053aa07ee8301ea9ab51826 | Triage

Sharing

General

Target

2024-09-11_45110443ded6c699983e35b907656808_cryptolocker
Size

51KB
Sample

240911-qnsa1sshnf
MD5

45110443ded6c699983e35b907656808
SHA1

92dfac0e2ab4078e925e1e6fd94860a49d6e3c9d
SHA256

64dcdad103709b1b94676dec244fe1fab3ac7373e053aa07ee8301ea9ab51826
SHA512

a7aef95ec0bf9767e61084fa41a7b29f49f5b52319a95ca6b2b973740c8a68cc5c2a652a334c4c08720f4feb471dfdd9b0b496cd65de764b0384274d10c40b7d
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nm:vj+jsMQMOtEvwDpj5HczerLO04Bh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-11_45110443ded6c699983e35b907656808_cryptolocker
- Size
  
  51KB
- MD5
  
  45110443ded6c699983e35b907656808
- SHA1
  
  92dfac0e2ab4078e925e1e6fd94860a49d6e3c9d
- SHA256
  
  64dcdad103709b1b94676dec244fe1fab3ac7373e053aa07ee8301ea9ab51826
- SHA512
  
  a7aef95ec0bf9767e61084fa41a7b29f49f5b52319a95ca6b2b973740c8a68cc5c2a652a334c4c08720f4feb471dfdd9b0b496cd65de764b0384274d10c40b7d
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nm:vj+jsMQMOtEvwDpj5HczerLO04Bh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2