1b9fe1d00ff1ebf8ddf961fe1e8484b8f3cae2bef7fca12e0ee226632ab9b207 | Triage

Sharing

General

Target

2024-10-06_9b01cc06b7faf13ae17344b9efbb5e77_cryptolocker
Size

96KB
Sample

241006-jb1cjavglm
MD5

9b01cc06b7faf13ae17344b9efbb5e77
SHA1

16c8f92a3d165d09fedfbb3ca741fe4a96a4a1f7
SHA256

1b9fe1d00ff1ebf8ddf961fe1e8484b8f3cae2bef7fca12e0ee226632ab9b207
SHA512

c458a295aca1b369f1ed45b9f2e058725c30385016fd6dd9f76945e66036e3c541cb019698e629d5092bd5fe5bd036fe6d191f462ed3ecdcd318bb2c12a21648
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNuj2GQi8YC:V6a+pOtEvwDpjtz/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-06_9b01cc06b7faf13ae17344b9efbb5e77_cryptolocker
- Size
  
  96KB
- MD5
  
  9b01cc06b7faf13ae17344b9efbb5e77
- SHA1
  
  16c8f92a3d165d09fedfbb3ca741fe4a96a4a1f7
- SHA256
  
  1b9fe1d00ff1ebf8ddf961fe1e8484b8f3cae2bef7fca12e0ee226632ab9b207
- SHA512
  
  c458a295aca1b369f1ed45b9f2e058725c30385016fd6dd9f76945e66036e3c541cb019698e629d5092bd5fe5bd036fe6d191f462ed3ecdcd318bb2c12a21648
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNuj2GQi8YC:V6a+pOtEvwDpjtz/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2