f4963b241c6190ec2368a7f841c38f31966ead7f43209d67a186a5027f623cba | Triage

Sharing

General

Target

2024-10-04_df6acd04740b63d32819dd1cc1081032_cryptolocker
Size

47KB
Sample

241004-eeykwsxbnc
MD5

df6acd04740b63d32819dd1cc1081032
SHA1

8dba58b7098b1b11561f6e15d84f11224f8b24ee
SHA256

f4963b241c6190ec2368a7f841c38f31966ead7f43209d67a186a5027f623cba
SHA512

baf58c7561fa2594657964ac7edde5eb783c65124a430ccb96052815da68b90ef6a9d4b9a121393beada78e802ed771f1925391ffbae65d85e02ca8843f1a56b
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAW:P6QFElP6k+MRQMOtEvwDpjBQpVX8AW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-04_df6acd04740b63d32819dd1cc1081032_cryptolocker
- Size
  
  47KB
- MD5
  
  df6acd04740b63d32819dd1cc1081032
- SHA1
  
  8dba58b7098b1b11561f6e15d84f11224f8b24ee
- SHA256
  
  f4963b241c6190ec2368a7f841c38f31966ead7f43209d67a186a5027f623cba
- SHA512
  
  baf58c7561fa2594657964ac7edde5eb783c65124a430ccb96052815da68b90ef6a9d4b9a121393beada78e802ed771f1925391ffbae65d85e02ca8843f1a56b
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAW:P6QFElP6k+MRQMOtEvwDpjBQpVX8AW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2