4d190c9e78b15c8eeda36d6312d170f0433d14b6f8e09c3a537250aea2a488aa | Triage

Sharing

General

Target

2024-10-06_f584415aa1358558788489e68f26cacf_cryptolocker
Size

48KB
Sample

241006-dkdbga1cpk
MD5

f584415aa1358558788489e68f26cacf
SHA1

e31a4ea2e9999806b6f11333eb8fd938c4370c04
SHA256

4d190c9e78b15c8eeda36d6312d170f0433d14b6f8e09c3a537250aea2a488aa
SHA512

b6bc69786a7cf3ae4f7cee0c06ee15aee9767d28451e07820e6e77cc5531979c158f884875e503f4132f255dbcd278e105548315d775c0f9af101a61d8186625
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJ0:6j+1NMOtEvwDpjrRraJ0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_f584415aa1358558788489e68f26cacf_cryptolocker
- Size
  
  48KB
- MD5
  
  f584415aa1358558788489e68f26cacf
- SHA1
  
  e31a4ea2e9999806b6f11333eb8fd938c4370c04
- SHA256
  
  4d190c9e78b15c8eeda36d6312d170f0433d14b6f8e09c3a537250aea2a488aa
- SHA512
  
  b6bc69786a7cf3ae4f7cee0c06ee15aee9767d28451e07820e6e77cc5531979c158f884875e503f4132f255dbcd278e105548315d775c0f9af101a61d8186625
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJ0:6j+1NMOtEvwDpjrRraJ0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2