12779408ec718ae671b0fc800331d503eedf60f867d3a786a422ce206cbb5acf | Triage

Sharing

General

Target

2024-10-04_1acf812f04f830ba2ea25e5abf146a63_cryptolocker
Size

48KB
Sample

241004-kapebatdqr
MD5

1acf812f04f830ba2ea25e5abf146a63
SHA1

933083c5a97bc522bdec331588bdb17f4ed29e5d
SHA256

12779408ec718ae671b0fc800331d503eedf60f867d3a786a422ce206cbb5acf
SHA512

e980ff32c51b39060ed4d99e06f0972e051f3f27a50508d6e9a0e97511fee72802dfc15fb0e5f18259fac53091b22022b9498e480548a97ac08864f0b0897790
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPc1:P6QFElP6k+MRQMOtEvwDpjBQpVXV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-04_1acf812f04f830ba2ea25e5abf146a63_cryptolocker
- Size
  
  48KB
- MD5
  
  1acf812f04f830ba2ea25e5abf146a63
- SHA1
  
  933083c5a97bc522bdec331588bdb17f4ed29e5d
- SHA256
  
  12779408ec718ae671b0fc800331d503eedf60f867d3a786a422ce206cbb5acf
- SHA512
  
  e980ff32c51b39060ed4d99e06f0972e051f3f27a50508d6e9a0e97511fee72802dfc15fb0e5f18259fac53091b22022b9498e480548a97ac08864f0b0897790
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPc1:P6QFElP6k+MRQMOtEvwDpjBQpVXV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2