183daaba9c7100e398ec53c23127a59952fab76819dc214972acce5f4a4a3e88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-05_970db882d0484c1ec856f264908f513b_cryptolocker
Size

47KB
Sample

241005-yapxqszgmq
MD5

970db882d0484c1ec856f264908f513b
SHA1

840af9487a855667a7da256716240ded606760c7
SHA256

183daaba9c7100e398ec53c23127a59952fab76819dc214972acce5f4a4a3e88
SHA512

431ba488b69f5b234b7c859913b4f48a4322b363dd5adf05f30fdcfd6ed9163614d55d439381f39881baa0f1a4e6711dddbc0a8647fcb583a07b054d2da4d69d
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXm:V6QFElP6n+gMQMOtEvwDpjyaHaXrm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-05_970db882d0484c1ec856f264908f513b_cryptolocker
- Size
  
  47KB
- MD5
  
  970db882d0484c1ec856f264908f513b
- SHA1
  
  840af9487a855667a7da256716240ded606760c7
- SHA256
  
  183daaba9c7100e398ec53c23127a59952fab76819dc214972acce5f4a4a3e88
- SHA512
  
  431ba488b69f5b234b7c859913b4f48a4322b363dd5adf05f30fdcfd6ed9163614d55d439381f39881baa0f1a4e6711dddbc0a8647fcb583a07b054d2da4d69d
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXm:V6QFElP6n+gMQMOtEvwDpjyaHaXrm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2