1410c050ac644bf0b7696ca485baaeb1ccf9cc0c1b8d4a436919e319f82604e4 | Triage

Sharing

General

Target

2024-09-12_eb1f30e65ae849ab5f3049aa3b60717f_cryptolocker
Size

39KB
Sample

240912-dmnvzsyblm
MD5

eb1f30e65ae849ab5f3049aa3b60717f
SHA1

dc2c49b11596b1a9d49a5fcc1455a3c77cf8adbd
SHA256

1410c050ac644bf0b7696ca485baaeb1ccf9cc0c1b8d4a436919e319f82604e4
SHA512

60c5e4aa95cb93cc0e56b5b93b3acd9a11762e906e6dc11fb55747c877759e024be256b2f88e8795ad0bdb5d93b5791916ffa20ce2579e3a0a2454c59e2045a7
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3Li:btB9g/WItCSsAGjX7e9N0hunRv+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_eb1f30e65ae849ab5f3049aa3b60717f_cryptolocker
- Size
  
  39KB
- MD5
  
  eb1f30e65ae849ab5f3049aa3b60717f
- SHA1
  
  dc2c49b11596b1a9d49a5fcc1455a3c77cf8adbd
- SHA256
  
  1410c050ac644bf0b7696ca485baaeb1ccf9cc0c1b8d4a436919e319f82604e4
- SHA512
  
  60c5e4aa95cb93cc0e56b5b93b3acd9a11762e906e6dc11fb55747c877759e024be256b2f88e8795ad0bdb5d93b5791916ffa20ce2579e3a0a2454c59e2045a7
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3Li:btB9g/WItCSsAGjX7e9N0hunRv+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2