48ebfb9e7a3d50b3e1fa7c3b69826d46932e859903c1230e162b50782a4994ac | Triage

Sharing

General

Target

2024-10-02_63bc51983036e3c7c93a7f96fc909e31_cryptolocker
Size

79KB
Sample

241002-e227laxbql
MD5

63bc51983036e3c7c93a7f96fc909e31
SHA1

2554ec9ffff4ce599d483f207d515ca84b675153
SHA256

48ebfb9e7a3d50b3e1fa7c3b69826d46932e859903c1230e162b50782a4994ac
SHA512

b12180553e63cd0c9841a1b581a0596d5cfd33051c3c4ad529646d709d1124fadcdd80d41f15846e8dd598f3b6067feff313a807639bfc3886c1e3d76f725bd7
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUJ/:ZVxkGOtEvwDpjca1/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-02_63bc51983036e3c7c93a7f96fc909e31_cryptolocker
- Size
  
  79KB
- MD5
  
  63bc51983036e3c7c93a7f96fc909e31
- SHA1
  
  2554ec9ffff4ce599d483f207d515ca84b675153
- SHA256
  
  48ebfb9e7a3d50b3e1fa7c3b69826d46932e859903c1230e162b50782a4994ac
- SHA512
  
  b12180553e63cd0c9841a1b581a0596d5cfd33051c3c4ad529646d709d1124fadcdd80d41f15846e8dd598f3b6067feff313a807639bfc3886c1e3d76f725bd7
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUJ/:ZVxkGOtEvwDpjca1/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2