1e5b597bc28190a2f3a4d46542febe7f2fa3eac1aec3c80b3ecd3407283e36b7 | Triage

Sharing

General

Target

2024-10-09_b4acb064ad733695bb98baef5135c3c9_cryptolocker
Size

36KB
Sample

241009-b1at6stdnc
MD5

b4acb064ad733695bb98baef5135c3c9
SHA1

af7a0c47d4ec160d64d428efe951613f2a3a653e
SHA256

1e5b597bc28190a2f3a4d46542febe7f2fa3eac1aec3c80b3ecd3407283e36b7
SHA512

35db23874039b250abb37bf9a1ae58b7bc286f189306dc4870643b0bbc559ef34e37635619212d1f4ca7cfb3f87f854e0a53ab4156029210c3e4c66f8cfdb024
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaDMLZSsplOrtu+:X6QFElP6n+gJQMOtEvwDpjBv1Q

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_b4acb064ad733695bb98baef5135c3c9_cryptolocker
- Size
  
  36KB
- MD5
  
  b4acb064ad733695bb98baef5135c3c9
- SHA1
  
  af7a0c47d4ec160d64d428efe951613f2a3a653e
- SHA256
  
  1e5b597bc28190a2f3a4d46542febe7f2fa3eac1aec3c80b3ecd3407283e36b7
- SHA512
  
  35db23874039b250abb37bf9a1ae58b7bc286f189306dc4870643b0bbc559ef34e37635619212d1f4ca7cfb3f87f854e0a53ab4156029210c3e4c66f8cfdb024
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaDMLZSsplOrtu+:X6QFElP6n+gJQMOtEvwDpjBv1Q
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2