16008062b32766b48cb51e0fa00e93ad1e1fab0b97886006d2209698e804ca29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-02_097d5683686537687364c3587e1e86ff_cryptolocker
Size

44KB
Sample

241002-mq3yra1gqr
MD5

097d5683686537687364c3587e1e86ff
SHA1

24c67f5ad7b64c4efd35a6f57c1b62e4d671ff8e
SHA256

16008062b32766b48cb51e0fa00e93ad1e1fab0b97886006d2209698e804ca29
SHA512

a2af7df959c0d3c7a2e38db683d7b68a76ebca13463234f0023bdc693fb222ebd50c9a5d45ef1fa151df9efaf1a02ab59a7d71db907c777310c50fbbcc0321e2
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrA:bCDOw9aMDooc+vAqj8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-02_097d5683686537687364c3587e1e86ff_cryptolocker
- Size
  
  44KB
- MD5
  
  097d5683686537687364c3587e1e86ff
- SHA1
  
  24c67f5ad7b64c4efd35a6f57c1b62e4d671ff8e
- SHA256
  
  16008062b32766b48cb51e0fa00e93ad1e1fab0b97886006d2209698e804ca29
- SHA512
  
  a2af7df959c0d3c7a2e38db683d7b68a76ebca13463234f0023bdc693fb222ebd50c9a5d45ef1fa151df9efaf1a02ab59a7d71db907c777310c50fbbcc0321e2
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrA:bCDOw9aMDooc+vAqj8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2