fdb6c551f4d678800d62b5b38a795f0f2fef481cd293c285ccab2b0196487913 | Triage

Sharing

General

Target

2024-10-01_45edf351d844421b1a2e3ed57450a0e8_cryptolocker
Size

58KB
Sample

241001-d7cy8aydmj
MD5

45edf351d844421b1a2e3ed57450a0e8
SHA1

53c8ed27b95e0e584f7b6c054c12a54a173a1026
SHA256

fdb6c551f4d678800d62b5b38a795f0f2fef481cd293c285ccab2b0196487913
SHA512

f43aad2c5c97d8e4d3056c03a482a6992d552db5f66b0f610299129cdbcc238774435df616b4b0ffdd03dfe6792c83f08ada66a522c745ccfb86ce2fe7477c66
SSDEEP

768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylsPQQWTa/2wF:79mqyNhQMOtEvwDpjBPY7xv3gy9WTAH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_45edf351d844421b1a2e3ed57450a0e8_cryptolocker
- Size
  
  58KB
- MD5
  
  45edf351d844421b1a2e3ed57450a0e8
- SHA1
  
  53c8ed27b95e0e584f7b6c054c12a54a173a1026
- SHA256
  
  fdb6c551f4d678800d62b5b38a795f0f2fef481cd293c285ccab2b0196487913
- SHA512
  
  f43aad2c5c97d8e4d3056c03a482a6992d552db5f66b0f610299129cdbcc238774435df616b4b0ffdd03dfe6792c83f08ada66a522c745ccfb86ce2fe7477c66
- SSDEEP
  
  768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylsPQQWTa/2wF:79mqyNhQMOtEvwDpjBPY7xv3gy9WTAH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2