49a88e479a5a1e24aedc7c937791ccbec06ebf9232e1205c92747151d185c33c | Triage

Sharing

General

Target

2024-10-02_2dd97d51d10098a35d08033c90763a6d_cryptolocker
Size

68KB
Sample

241002-cy9fdswfke
MD5

2dd97d51d10098a35d08033c90763a6d
SHA1

2512ac11cd9eda6d38cc300e7e4864ddf7088c3b
SHA256

49a88e479a5a1e24aedc7c937791ccbec06ebf9232e1205c92747151d185c33c
SHA512

bff6c3732ed7580b56580e97cb507692df8f10431dcda5c1dfafedb07758112739c89292f319aef7e1b37cb7708e4501a55fc8b553a45d79016daf2b7aeb1e59
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIZ:6j+1NMOtEvwDpjr8ox8UDEpN/jM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-02_2dd97d51d10098a35d08033c90763a6d_cryptolocker
- Size
  
  68KB
- MD5
  
  2dd97d51d10098a35d08033c90763a6d
- SHA1
  
  2512ac11cd9eda6d38cc300e7e4864ddf7088c3b
- SHA256
  
  49a88e479a5a1e24aedc7c937791ccbec06ebf9232e1205c92747151d185c33c
- SHA512
  
  bff6c3732ed7580b56580e97cb507692df8f10431dcda5c1dfafedb07758112739c89292f319aef7e1b37cb7708e4501a55fc8b553a45d79016daf2b7aeb1e59
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIZ:6j+1NMOtEvwDpjr8ox8UDEpN/jM
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2