a8bb630be9b1c29ed89d6dac10797c89590d761c3d556448d864f485392eed3f | Triage

Sharing

General

Target

2024-10-03_81cd7133c0427ef825bd530d2d0dde66_cryptolocker
Size

48KB
Sample

241003-c14ypazfrj
MD5

81cd7133c0427ef825bd530d2d0dde66
SHA1

1091f9b9453bd3bca07c6119f9b540c2a8ca6792
SHA256

a8bb630be9b1c29ed89d6dac10797c89590d761c3d556448d864f485392eed3f
SHA512

245d43841626d4e277539bd44795d0c7e0b7ace628f950741ff76227147acc8bee46eaabfb4b1835e418bae8d3e3c9ff8ca81f22251add3f6cc74ee7fd0e2bb6
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITL:26Q0ElP6G+gBQMOtEvwDpjgWMl7TL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-03_81cd7133c0427ef825bd530d2d0dde66_cryptolocker
- Size
  
  48KB
- MD5
  
  81cd7133c0427ef825bd530d2d0dde66
- SHA1
  
  1091f9b9453bd3bca07c6119f9b540c2a8ca6792
- SHA256
  
  a8bb630be9b1c29ed89d6dac10797c89590d761c3d556448d864f485392eed3f
- SHA512
  
  245d43841626d4e277539bd44795d0c7e0b7ace628f950741ff76227147acc8bee46eaabfb4b1835e418bae8d3e3c9ff8ca81f22251add3f6cc74ee7fd0e2bb6
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITL:26Q0ElP6G+gBQMOtEvwDpjgWMl7TL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2