421489e4cf0603293c35f9b5f8ad525cdf8b42968cf11fb89e976ae817d3626a | Triage

Sharing

General

Target

2024-09-28_0c6a499e195a47365617ef152ae1e8c6_cryptolocker
Size

69KB
Sample

240928-e12vfaxaml
MD5

0c6a499e195a47365617ef152ae1e8c6
SHA1

bec15e0b19b2fedd5f098875120f9a3a03f86a70
SHA256

421489e4cf0603293c35f9b5f8ad525cdf8b42968cf11fb89e976ae817d3626a
SHA512

82c93f6ef19b9a327e43322929c141395c9310e08db38e01c70f64d0ef55d1d098d178a104218f674ec8a992ea6389317557e09251000ed375863fd21f88bb7c
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UY5:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-28_0c6a499e195a47365617ef152ae1e8c6_cryptolocker
- Size
  
  69KB
- MD5
  
  0c6a499e195a47365617ef152ae1e8c6
- SHA1
  
  bec15e0b19b2fedd5f098875120f9a3a03f86a70
- SHA256
  
  421489e4cf0603293c35f9b5f8ad525cdf8b42968cf11fb89e976ae817d3626a
- SHA512
  
  82c93f6ef19b9a327e43322929c141395c9310e08db38e01c70f64d0ef55d1d098d178a104218f674ec8a992ea6389317557e09251000ed375863fd21f88bb7c
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UY5:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2