221438b75b98e9ade2aa663b269857d895b1ba1bc4d0d8093aeb76791eb9ec90 | Triage

Sharing

General

Target

2024-09-19_0970e5f629e1f3347ee71e4ce6771b36_cryptolocker
Size

48KB
Sample

240919-f2rljashpj
MD5

0970e5f629e1f3347ee71e4ce6771b36
SHA1

085a0d3c6e4b5587ca0fcedfe32aa604797df93d
SHA256

221438b75b98e9ade2aa663b269857d895b1ba1bc4d0d8093aeb76791eb9ec90
SHA512

908cccae077963548a7a27270f11b967a23ee6fbe1e301e580f567814dabae728e423132ae06f2c170959e7aa690f176b41e048524d367757d2b45dc9be9703f
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPyh:P6QFElP6k+MRQMOtEvwDpjBQpVX3h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_0970e5f629e1f3347ee71e4ce6771b36_cryptolocker
- Size
  
  48KB
- MD5
  
  0970e5f629e1f3347ee71e4ce6771b36
- SHA1
  
  085a0d3c6e4b5587ca0fcedfe32aa604797df93d
- SHA256
  
  221438b75b98e9ade2aa663b269857d895b1ba1bc4d0d8093aeb76791eb9ec90
- SHA512
  
  908cccae077963548a7a27270f11b967a23ee6fbe1e301e580f567814dabae728e423132ae06f2c170959e7aa690f176b41e048524d367757d2b45dc9be9703f
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPyh:P6QFElP6k+MRQMOtEvwDpjBQpVX3h
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2