088f09f6d523465113ee6df6739d2e5adf66f19ec9af5dd85da8541401ef5c0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-30_67d2e9d68b396fbce9b103abc2075fcc_cryptolocker
Size

47KB
Sample

240930-cxr5qataqr
MD5

67d2e9d68b396fbce9b103abc2075fcc
SHA1

eacd48909d86fbb0d8ae30000e9e5f571275ee53
SHA256

088f09f6d523465113ee6df6739d2e5adf66f19ec9af5dd85da8541401ef5c0f
SHA512

1d9af6a7f951d76bef6448ad7dbdad940918b118004d47b6ca86950d0b8a16298915bc5ab48f1167f4513dd84f47308ad511d9eb247327c8294a9bfe1daff604
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zry:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-30_67d2e9d68b396fbce9b103abc2075fcc_cryptolocker
- Size
  
  47KB
- MD5
  
  67d2e9d68b396fbce9b103abc2075fcc
- SHA1
  
  eacd48909d86fbb0d8ae30000e9e5f571275ee53
- SHA256
  
  088f09f6d523465113ee6df6739d2e5adf66f19ec9af5dd85da8541401ef5c0f
- SHA512
  
  1d9af6a7f951d76bef6448ad7dbdad940918b118004d47b6ca86950d0b8a16298915bc5ab48f1167f4513dd84f47308ad511d9eb247327c8294a9bfe1daff604
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zry:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2