dc4a5907496698316579169d60376004892ae90d2a71da1f3b36c747fae84779 | Triage

Sharing

General

Target

2024-09-19_47e10c315815b1f9fa0a5d5de212c670_cryptolocker
Size

79KB
Sample

240919-g6ctlsvfnk
MD5

47e10c315815b1f9fa0a5d5de212c670
SHA1

116fc40617214d8fd341ada57e5e3c68b59a5571
SHA256

dc4a5907496698316579169d60376004892ae90d2a71da1f3b36c747fae84779
SHA512

b030903474faef236e2c1c28d7f69f5938ce3c84588b7cb48f5894f7edd71714e0eee2284c28a984f2def5d9b988850e76c088cf0dacc69089a716e050b1b64b
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUp:ZVxkGOtEvwDpjca9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_47e10c315815b1f9fa0a5d5de212c670_cryptolocker
- Size
  
  79KB
- MD5
  
  47e10c315815b1f9fa0a5d5de212c670
- SHA1
  
  116fc40617214d8fd341ada57e5e3c68b59a5571
- SHA256
  
  dc4a5907496698316579169d60376004892ae90d2a71da1f3b36c747fae84779
- SHA512
  
  b030903474faef236e2c1c28d7f69f5938ce3c84588b7cb48f5894f7edd71714e0eee2284c28a984f2def5d9b988850e76c088cf0dacc69089a716e050b1b64b
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUp:ZVxkGOtEvwDpjca9
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2