96bb139c94acd4ad200b66c3f195fb5ebab98e0a58cd701b15ec17f0efa6db11 | Triage

Sharing

General

Target

2024-10-05_fa00ba56aebb0d9bcd3ad9ff8d7b8243_cryptolocker
Size

45KB
Sample

241005-zs8m8sxdnf
MD5

fa00ba56aebb0d9bcd3ad9ff8d7b8243
SHA1

4f584bc602246f2ea0f0b01cc516fbf8ff516254
SHA256

96bb139c94acd4ad200b66c3f195fb5ebab98e0a58cd701b15ec17f0efa6db11
SHA512

3b3053a27919a530bbccff81fabc74b7006f007d32999eb1d3a32993f4b78454682e1add69338978a30f1531081f18d24e6e4e4e12e95a3808a766a480db158b
SSDEEP

768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9w4:m5nkFNMOtEvwDpjG8hgpY19X

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-05_fa00ba56aebb0d9bcd3ad9ff8d7b8243_cryptolocker
- Size
  
  45KB
- MD5
  
  fa00ba56aebb0d9bcd3ad9ff8d7b8243
- SHA1
  
  4f584bc602246f2ea0f0b01cc516fbf8ff516254
- SHA256
  
  96bb139c94acd4ad200b66c3f195fb5ebab98e0a58cd701b15ec17f0efa6db11
- SHA512
  
  3b3053a27919a530bbccff81fabc74b7006f007d32999eb1d3a32993f4b78454682e1add69338978a30f1531081f18d24e6e4e4e12e95a3808a766a480db158b
- SSDEEP
  
  768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9w4:m5nkFNMOtEvwDpjG8hgpY19X
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2