d683e177438009b377085718c4022f63e5c04ae1071d40605c22fb3e3b702412 | Triage

Sharing

General

Target

2024-10-04_0bba8b001bd46449106a1b0fc52e5b26_cryptolocker
Size

66KB
Sample

241004-dxmexawbkc
MD5

0bba8b001bd46449106a1b0fc52e5b26
SHA1

97dbb9b15a9a140a9932bf11c60ea1565782bf06
SHA256

d683e177438009b377085718c4022f63e5c04ae1071d40605c22fb3e3b702412
SHA512

411e06a193e237364c839ff2e4ad1a1ddd81d244055cc2281dd3816da1936d17c4ff7f8944cdaa44fe292d1861e9c47fa54784c476252e169ab263e4b5fabe51
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4Z:BbdDmjr+OtEvwDpjM8v

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-04_0bba8b001bd46449106a1b0fc52e5b26_cryptolocker
- Size
  
  66KB
- MD5
  
  0bba8b001bd46449106a1b0fc52e5b26
- SHA1
  
  97dbb9b15a9a140a9932bf11c60ea1565782bf06
- SHA256
  
  d683e177438009b377085718c4022f63e5c04ae1071d40605c22fb3e3b702412
- SHA512
  
  411e06a193e237364c839ff2e4ad1a1ddd81d244055cc2281dd3816da1936d17c4ff7f8944cdaa44fe292d1861e9c47fa54784c476252e169ab263e4b5fabe51
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4Z:BbdDmjr+OtEvwDpjM8v
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2