093cb11c4dd90a9750df2644763bcd0000c9e1865654b33c5312c8398c73f839 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-02_ad06d0c21797698e79f46107875086ce_cryptolocker
Size

78KB
Sample

241002-qn6hmssbpg
MD5

ad06d0c21797698e79f46107875086ce
SHA1

76e7d09b139be069c5144ff44bcd06b30c78bf4f
SHA256

093cb11c4dd90a9750df2644763bcd0000c9e1865654b33c5312c8398c73f839
SHA512

cdd48ef661b65606f263b37fadd4677df9c6c9bd01e136a4905231542aecc6e71be568a9522507e9517776af84bcf1c975449eca22b7e12868b60d8808543afc
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsKp2:X6a+SOtEvwDpjBZYvQd2E

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-02_ad06d0c21797698e79f46107875086ce_cryptolocker
- Size
  
  78KB
- MD5
  
  ad06d0c21797698e79f46107875086ce
- SHA1
  
  76e7d09b139be069c5144ff44bcd06b30c78bf4f
- SHA256
  
  093cb11c4dd90a9750df2644763bcd0000c9e1865654b33c5312c8398c73f839
- SHA512
  
  cdd48ef661b65606f263b37fadd4677df9c6c9bd01e136a4905231542aecc6e71be568a9522507e9517776af84bcf1c975449eca22b7e12868b60d8808543afc
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsKp2:X6a+SOtEvwDpjBZYvQd2E
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2