60ca472fdf1483df783944fb5655fbf79986d16bdb2080a2a7b0510ec6097a55 | Triage

Sharing

General

Target

2024-09-19_11bf72f76ce0754ea8834de81f34cb11_cryptolocker
Size

45KB
Sample

240919-f3ggyssfre
MD5

11bf72f76ce0754ea8834de81f34cb11
SHA1

5e1f0000c86f9a76d4ae1cadee6d183efdd7ec05
SHA256

60ca472fdf1483df783944fb5655fbf79986d16bdb2080a2a7b0510ec6097a55
SHA512

fe26cad76c21defe24c5ba74ed4efde9e0b5454f2cf43115fdab50c71ab08d633cc2c31b832acb3356e440338850e43652d1b770ed00fbd7920f2fb25359c63b
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPD:P6QFElP6k+MRQMOtEvwDpjBQpVXe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_11bf72f76ce0754ea8834de81f34cb11_cryptolocker
- Size
  
  45KB
- MD5
  
  11bf72f76ce0754ea8834de81f34cb11
- SHA1
  
  5e1f0000c86f9a76d4ae1cadee6d183efdd7ec05
- SHA256
  
  60ca472fdf1483df783944fb5655fbf79986d16bdb2080a2a7b0510ec6097a55
- SHA512
  
  fe26cad76c21defe24c5ba74ed4efde9e0b5454f2cf43115fdab50c71ab08d633cc2c31b832acb3356e440338850e43652d1b770ed00fbd7920f2fb25359c63b
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPD:P6QFElP6k+MRQMOtEvwDpjBQpVXe
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2