2dfccd6661693e3229cb1e95029e4cbca4c7661dcc663298b061012413a03058 | Triage

Sharing

General

Target

2024-10-08_1b81b145b0e96e9b2be7aafb0f51ed5f_cryptolocker
Size

28KB
Sample

241008-z788baxglj
MD5

1b81b145b0e96e9b2be7aafb0f51ed5f
SHA1

162a7d7138cff2fee0e5ce419778a8c82d4ecd82
SHA256

2dfccd6661693e3229cb1e95029e4cbca4c7661dcc663298b061012413a03058
SHA512

aee69e717566fdf7dd76adf0164ac68a1f815210ff6745fef8a75bbf2bebce1ae7d18b510fbd6061b23b0c97c3b38b5faff27e513fcb3d7ebe2eaf99ac51f49c
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt3:b7o/2n1TCraU6GD1a4Xt3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-08_1b81b145b0e96e9b2be7aafb0f51ed5f_cryptolocker
- Size
  
  28KB
- MD5
  
  1b81b145b0e96e9b2be7aafb0f51ed5f
- SHA1
  
  162a7d7138cff2fee0e5ce419778a8c82d4ecd82
- SHA256
  
  2dfccd6661693e3229cb1e95029e4cbca4c7661dcc663298b061012413a03058
- SHA512
  
  aee69e717566fdf7dd76adf0164ac68a1f815210ff6745fef8a75bbf2bebce1ae7d18b510fbd6061b23b0c97c3b38b5faff27e513fcb3d7ebe2eaf99ac51f49c
- SSDEEP
  
  384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt3:b7o/2n1TCraU6GD1a4Xt3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2