5115dc1e482e5faf1f2bab7a0edba0e4be111c10454ec9a3a560283e164971af | Triage

Sharing

General

Target

2024-09-19_0e35ef4318e546b9a0f4063051acfb47_cryptolocker
Size

57KB
Sample

240919-g47wzavcqe
MD5

0e35ef4318e546b9a0f4063051acfb47
SHA1

e103d0953570fbc98c1fce855552f4a5a461a639
SHA256

5115dc1e482e5faf1f2bab7a0edba0e4be111c10454ec9a3a560283e164971af
SHA512

ef03daf750d16eef6e70e1e0f600478490ad5ed218b41766ef4354399aa06432b806eb68d8085163e0f4abcee0b689f0fec98f13011fe568b57dbff09720b6e2
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EcG:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7I

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_0e35ef4318e546b9a0f4063051acfb47_cryptolocker
- Size
  
  57KB
- MD5
  
  0e35ef4318e546b9a0f4063051acfb47
- SHA1
  
  e103d0953570fbc98c1fce855552f4a5a461a639
- SHA256
  
  5115dc1e482e5faf1f2bab7a0edba0e4be111c10454ec9a3a560283e164971af
- SHA512
  
  ef03daf750d16eef6e70e1e0f600478490ad5ed218b41766ef4354399aa06432b806eb68d8085163e0f4abcee0b689f0fec98f13011fe568b57dbff09720b6e2
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EcG:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7I
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2