0e4f0dc11ffad047df33a568c8cfe3530478690849d251f06acb4205f89a0405 | Triage

Sharing

General

Target

2024-10-04_a16fefa99e0f7d56efbc3f2e9519ef06_cryptolocker
Size

48KB
Sample

241004-d8ymbawgmh
MD5

a16fefa99e0f7d56efbc3f2e9519ef06
SHA1

d2d22276b0e66ab50f4e0ac37956f81635ccb6aa
SHA256

0e4f0dc11ffad047df33a568c8cfe3530478690849d251f06acb4205f89a0405
SHA512

6dda12076f7dc688f7d216542371d3161207ddb9226c18bdf3e65ab368811ed12b3864361ff69c701d628f6317db2423d4f424ab463a0fecc5a93737559c732b
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPcZ:P6QFElP6k+MRQMOtEvwDpjBQpVX5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-04_a16fefa99e0f7d56efbc3f2e9519ef06_cryptolocker
- Size
  
  48KB
- MD5
  
  a16fefa99e0f7d56efbc3f2e9519ef06
- SHA1
  
  d2d22276b0e66ab50f4e0ac37956f81635ccb6aa
- SHA256
  
  0e4f0dc11ffad047df33a568c8cfe3530478690849d251f06acb4205f89a0405
- SHA512
  
  6dda12076f7dc688f7d216542371d3161207ddb9226c18bdf3e65ab368811ed12b3864361ff69c701d628f6317db2423d4f424ab463a0fecc5a93737559c732b
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPcZ:P6QFElP6k+MRQMOtEvwDpjBQpVX5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2