c07921bf1a12f5f133f9fadc47efe303669eedfdb4cf3be6d51b845f6875f5a4 | Triage

Sharing

General

Target

2024-10-08_71ce58a2e182a3ae16a2dd8a92892e54_cryptolocker
Size

74KB
Sample

241008-3xvhyszgnr
MD5

71ce58a2e182a3ae16a2dd8a92892e54
SHA1

bcf6b3345918d38da98daafb0e2dcb1ff05e1f19
SHA256

c07921bf1a12f5f133f9fadc47efe303669eedfdb4cf3be6d51b845f6875f5a4
SHA512

4742a8a416e2a93c91429c12db9a185645747c6c4284de63489ee57ae3faf8d776896ba598ab2cff6c809ea2b4f04855d10ec03ef78fc9e10c93857030cd9395
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWf:ZVxkGOtEvwDpjcax+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-08_71ce58a2e182a3ae16a2dd8a92892e54_cryptolocker
- Size
  
  74KB
- MD5
  
  71ce58a2e182a3ae16a2dd8a92892e54
- SHA1
  
  bcf6b3345918d38da98daafb0e2dcb1ff05e1f19
- SHA256
  
  c07921bf1a12f5f133f9fadc47efe303669eedfdb4cf3be6d51b845f6875f5a4
- SHA512
  
  4742a8a416e2a93c91429c12db9a185645747c6c4284de63489ee57ae3faf8d776896ba598ab2cff6c809ea2b4f04855d10ec03ef78fc9e10c93857030cd9395
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWf:ZVxkGOtEvwDpjcax+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2