d0a7a9f6c8e2acfa2ad7fdbe69373d80954bf122e4ef0e3ea16c088482581122 | Triage

Sharing

General

Target

2024-10-06_8c45bd4c0ee7dcb697245e77aa6ec5bf_cryptolocker
Size

58KB
Sample

241006-fal7qssgpm
MD5

8c45bd4c0ee7dcb697245e77aa6ec5bf
SHA1

e55ebda3e167aa7c8a8aafd76ed9b2c09caf407e
SHA256

d0a7a9f6c8e2acfa2ad7fdbe69373d80954bf122e4ef0e3ea16c088482581122
SHA512

46c230c2ffaab47237a82896b62f1f9b7c0f7702481d3c0c3a7f18d3deb584ed8bbceecbe3c228ad57412d28147f61ac0c40502206d710ea2bd861dd55569d3e
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tML:TCjsIOtEvwDpj5HE/OUHnSMYQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_8c45bd4c0ee7dcb697245e77aa6ec5bf_cryptolocker
- Size
  
  58KB
- MD5
  
  8c45bd4c0ee7dcb697245e77aa6ec5bf
- SHA1
  
  e55ebda3e167aa7c8a8aafd76ed9b2c09caf407e
- SHA256
  
  d0a7a9f6c8e2acfa2ad7fdbe69373d80954bf122e4ef0e3ea16c088482581122
- SHA512
  
  46c230c2ffaab47237a82896b62f1f9b7c0f7702481d3c0c3a7f18d3deb584ed8bbceecbe3c228ad57412d28147f61ac0c40502206d710ea2bd861dd55569d3e
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tML:TCjsIOtEvwDpj5HE/OUHnSMYQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2