0c9883223ce72c8550269e0069684a4c9542dd5f3ced53e5a9f765d872f1df18 | Triage

Sharing

General

Target

2024-10-03_de1c52da3a571c00d115aa820a45b959_cryptolocker
Size

56KB
Sample

241003-c7w7esvand
MD5

de1c52da3a571c00d115aa820a45b959
SHA1

2382bc484e0d93ea3669c8341ba31c0763c0636d
SHA256

0c9883223ce72c8550269e0069684a4c9542dd5f3ced53e5a9f765d872f1df18
SHA512

a25740bc24d09e9a88fa2a2233055d2df2a3d0cd570c2025a1b773d394b427dd6f73a3fdcffab936e7449313a328ce24611ff02f73337d4975777732384a7268
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTI7:X6QFElP6n+gJBMOtEvwDpjBtExmlA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-03_de1c52da3a571c00d115aa820a45b959_cryptolocker
- Size
  
  56KB
- MD5
  
  de1c52da3a571c00d115aa820a45b959
- SHA1
  
  2382bc484e0d93ea3669c8341ba31c0763c0636d
- SHA256
  
  0c9883223ce72c8550269e0069684a4c9542dd5f3ced53e5a9f765d872f1df18
- SHA512
  
  a25740bc24d09e9a88fa2a2233055d2df2a3d0cd570c2025a1b773d394b427dd6f73a3fdcffab936e7449313a328ce24611ff02f73337d4975777732384a7268
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTI7:X6QFElP6n+gJBMOtEvwDpjBtExmlA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2