b58148b1f19c77bc38262f2cdf7684046b92b0b928f7b0d62f5648756f723b7b | Triage

Sharing

General

Target

2024-09-12_194663fcd1212c5bb83e54f5f70e038b_cryptolocker
Size

62KB
Sample

240912-cxcp2awfrd
MD5

194663fcd1212c5bb83e54f5f70e038b
SHA1

ed130102f9077fbedaeaf56e22aa87c4b0ea15ed
SHA256

b58148b1f19c77bc38262f2cdf7684046b92b0b928f7b0d62f5648756f723b7b
SHA512

d04e99f33aa891e6f356929e1d8218f7594d3883f69df903f125cfe7c6e9a55f3c91c3451c8fb547aaa98bcb10b386415b337a1c437c1da3d847627104ddd465
SSDEEP

768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG96:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxW/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_194663fcd1212c5bb83e54f5f70e038b_cryptolocker
- Size
  
  62KB
- MD5
  
  194663fcd1212c5bb83e54f5f70e038b
- SHA1
  
  ed130102f9077fbedaeaf56e22aa87c4b0ea15ed
- SHA256
  
  b58148b1f19c77bc38262f2cdf7684046b92b0b928f7b0d62f5648756f723b7b
- SHA512
  
  d04e99f33aa891e6f356929e1d8218f7594d3883f69df903f125cfe7c6e9a55f3c91c3451c8fb547aaa98bcb10b386415b337a1c437c1da3d847627104ddd465
- SSDEEP
  
  768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG96:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxW/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2