fad63a3a41f97b41ac903d6de1a908e432d765bb226a35125ddfbb9c369103d5 | Triage

Sharing

General

Target

2024-09-25_268f0f20ff79ee60aba088d47583acb9_cryptolocker
Size

52KB
Sample

240925-j9ajrsvdqr
MD5

268f0f20ff79ee60aba088d47583acb9
SHA1

ffb48a51c9fafd3c401d584b782d49f542abbf68
SHA256

fad63a3a41f97b41ac903d6de1a908e432d765bb226a35125ddfbb9c369103d5
SHA512

8edbe60b9e33456107356be46209cb232a3cb5d2ce73300a318b8e5784d25e599e1d8cdb222493cfb3f9ee5bdc5937a92f34b43f7cdcb7ceabd41222fef26a0e
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccP6aDXlmfwV:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-25_268f0f20ff79ee60aba088d47583acb9_cryptolocker
- Size
  
  52KB
- MD5
  
  268f0f20ff79ee60aba088d47583acb9
- SHA1
  
  ffb48a51c9fafd3c401d584b782d49f542abbf68
- SHA256
  
  fad63a3a41f97b41ac903d6de1a908e432d765bb226a35125ddfbb9c369103d5
- SHA512
  
  8edbe60b9e33456107356be46209cb232a3cb5d2ce73300a318b8e5784d25e599e1d8cdb222493cfb3f9ee5bdc5937a92f34b43f7cdcb7ceabd41222fef26a0e
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccP6aDXlmfwV:V6QFElP6n+gMQMOtEvwDpjyaLccCGXlX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2