010c7116d423a6de4fe59e2f79a8a5e03771f6b8a19ab7df148e7816c0c17d91 | Triage

Sharing

General

Target

2024-09-27_34f6112f3a8d809e56bf97e7bcc716ae_cryptolocker
Size

60KB
Sample

240927-y59kmaxgjm
MD5

34f6112f3a8d809e56bf97e7bcc716ae
SHA1

9608cd56f4338dce7917dd03a8d9cfe565043359
SHA256

010c7116d423a6de4fe59e2f79a8a5e03771f6b8a19ab7df148e7816c0c17d91
SHA512

0fda15016639f1bd692ad38efd5170940f12a88cbd3bd3948a3e8f3dbcf99344201273a590a0c125e319324698ae19165c7d91acbc127460924540b71f9abda8
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEk:6j+1NMOtEvwDpjr8ox8UDEpX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-27_34f6112f3a8d809e56bf97e7bcc716ae_cryptolocker
- Size
  
  60KB
- MD5
  
  34f6112f3a8d809e56bf97e7bcc716ae
- SHA1
  
  9608cd56f4338dce7917dd03a8d9cfe565043359
- SHA256
  
  010c7116d423a6de4fe59e2f79a8a5e03771f6b8a19ab7df148e7816c0c17d91
- SHA512
  
  0fda15016639f1bd692ad38efd5170940f12a88cbd3bd3948a3e8f3dbcf99344201273a590a0c125e319324698ae19165c7d91acbc127460924540b71f9abda8
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEk:6j+1NMOtEvwDpjr8ox8UDEpX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2