1cdad6394e7e519928ab055b78c87e858f8be5bcdc808927b8b93d0a2ef5463e | Triage

Sharing

General

Target

2024-09-28_f803059bcd789dbe5e7b8d0ba2e435fa_cryptolocker
Size

46KB
Sample

240928-t128jaxhpc
MD5

f803059bcd789dbe5e7b8d0ba2e435fa
SHA1

1416dd8f09add36950facd6b2116499939307475
SHA256

1cdad6394e7e519928ab055b78c87e858f8be5bcdc808927b8b93d0a2ef5463e
SHA512

c100c2a1a64841afe39bb999ab235f750bb0467bb4757c2a345661f1bca97c64a381c35a67c88a7e5cd5abc925332284bdeb8bd722e991d127c98f31d864823e
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vduj:X6QFElP6n+gJBMOtEvwDpjBtEdw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-28_f803059bcd789dbe5e7b8d0ba2e435fa_cryptolocker
- Size
  
  46KB
- MD5
  
  f803059bcd789dbe5e7b8d0ba2e435fa
- SHA1
  
  1416dd8f09add36950facd6b2116499939307475
- SHA256
  
  1cdad6394e7e519928ab055b78c87e858f8be5bcdc808927b8b93d0a2ef5463e
- SHA512
  
  c100c2a1a64841afe39bb999ab235f750bb0467bb4757c2a345661f1bca97c64a381c35a67c88a7e5cd5abc925332284bdeb8bd722e991d127c98f31d864823e
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vduj:X6QFElP6n+gJBMOtEvwDpjBtEdw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2