13fb9feb2c927356176fd6614a67c0657c693588f5dcf3acdd5897f340a13cbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-15_0ce6a8309c5c83fe6c56923c13cb30f7_cryptolocker
Size

47KB
Sample

240915-mf6xnazcjm
MD5

0ce6a8309c5c83fe6c56923c13cb30f7
SHA1

30cf8ef73bd6e4e886eb8466b522588b4953a83b
SHA256

13fb9feb2c927356176fd6614a67c0657c693588f5dcf3acdd5897f340a13cbb
SHA512

a66a10c3208272165438d75d8d1a5830f04e1bacdaaf589f86cf89070decd1ffecec0b70401c780a560b30b88d1a393480d22b338bed5e4457b7fff23a883101
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr7K:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwzi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-15_0ce6a8309c5c83fe6c56923c13cb30f7_cryptolocker
- Size
  
  47KB
- MD5
  
  0ce6a8309c5c83fe6c56923c13cb30f7
- SHA1
  
  30cf8ef73bd6e4e886eb8466b522588b4953a83b
- SHA256
  
  13fb9feb2c927356176fd6614a67c0657c693588f5dcf3acdd5897f340a13cbb
- SHA512
  
  a66a10c3208272165438d75d8d1a5830f04e1bacdaaf589f86cf89070decd1ffecec0b70401c780a560b30b88d1a393480d22b338bed5e4457b7fff23a883101
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr7K:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwzi
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2