5afa2de06788f1684b2c2f831060c928dd91bb6bad0daa17673f25993beff66e | Triage

Sharing

General

Target

2024-10-04_4c6d4580bc283f7a01431be31a87c98c_cryptolocker
Size

44KB
Sample

241004-f4nbws1bja
MD5

4c6d4580bc283f7a01431be31a87c98c
SHA1

b32149dabe842dff6ad7b25681d6445559a9f342
SHA256

5afa2de06788f1684b2c2f831060c928dd91bb6bad0daa17673f25993beff66e
SHA512

61f269c51c6c16b040a27c1e4239a4a6ded6affb33125accf0300976e2503962aadf8842fba151289298c3b1dce5de43b04c2c90a82bb6ac295dc618640e2fa5
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrHL:bCDOw9aMDooc+vAqjLL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-04_4c6d4580bc283f7a01431be31a87c98c_cryptolocker
- Size
  
  44KB
- MD5
  
  4c6d4580bc283f7a01431be31a87c98c
- SHA1
  
  b32149dabe842dff6ad7b25681d6445559a9f342
- SHA256
  
  5afa2de06788f1684b2c2f831060c928dd91bb6bad0daa17673f25993beff66e
- SHA512
  
  61f269c51c6c16b040a27c1e4239a4a6ded6affb33125accf0300976e2503962aadf8842fba151289298c3b1dce5de43b04c2c90a82bb6ac295dc618640e2fa5
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrHL:bCDOw9aMDooc+vAqjLL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2