63c11c6d3bc5b54de8a5ae1ca2d955f85fef034f7f148e584136545d4236f909 | Triage

Sharing

General

Target

2024-09-21_184fbe66971ee9a30b23b39c65f74c10_cryptolocker
Size

70KB
Sample

240921-xdsblaxfml
MD5

184fbe66971ee9a30b23b39c65f74c10
SHA1

35c39fd08f189b5169362bdec6541b7d37cd9020
SHA256

63c11c6d3bc5b54de8a5ae1ca2d955f85fef034f7f148e584136545d4236f909
SHA512

59ff692b2ae4ef358e2d95b7809a9dd75a38e1b54efe08c4285ecc13942c69d1eef4b24f7cf8f005426397a1e7d68defb7409532c80f422c52022100bf5908af
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/d3:i5nkFGMOtEvwDpjNbwQEI8UZD9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_184fbe66971ee9a30b23b39c65f74c10_cryptolocker
- Size
  
  70KB
- MD5
  
  184fbe66971ee9a30b23b39c65f74c10
- SHA1
  
  35c39fd08f189b5169362bdec6541b7d37cd9020
- SHA256
  
  63c11c6d3bc5b54de8a5ae1ca2d955f85fef034f7f148e584136545d4236f909
- SHA512
  
  59ff692b2ae4ef358e2d95b7809a9dd75a38e1b54efe08c4285ecc13942c69d1eef4b24f7cf8f005426397a1e7d68defb7409532c80f422c52022100bf5908af
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/d3:i5nkFGMOtEvwDpjNbwQEI8UZD9
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2