f0985372bc9454f12dbf4d314c0b85c7a03ad2d09d65627ccb8c855b317316ba | Triage

Sharing

General

Target

2024-10-09_10523f0a3ed0110e1cacb611cca6b634_cryptolocker
Size

34KB
Sample

241009-d2krwavcmb
MD5

10523f0a3ed0110e1cacb611cca6b634
SHA1

e53b91a5c9ff282fe207e688de5aa6224d4042ca
SHA256

f0985372bc9454f12dbf4d314c0b85c7a03ad2d09d65627ccb8c855b317316ba
SHA512

64e4804f53945ac6c24adb02a1681b86fbb58a062e394e3527b0621d54a18dd719e2fc285dfeee7f1ae938ce4a4b2fe15a89063e34cdef9bb01082d3b0718ca8
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPF:YGzl5wjRQBBOsP1QMOtEvwDpjgarA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_10523f0a3ed0110e1cacb611cca6b634_cryptolocker
- Size
  
  34KB
- MD5
  
  10523f0a3ed0110e1cacb611cca6b634
- SHA1
  
  e53b91a5c9ff282fe207e688de5aa6224d4042ca
- SHA256
  
  f0985372bc9454f12dbf4d314c0b85c7a03ad2d09d65627ccb8c855b317316ba
- SHA512
  
  64e4804f53945ac6c24adb02a1681b86fbb58a062e394e3527b0621d54a18dd719e2fc285dfeee7f1ae938ce4a4b2fe15a89063e34cdef9bb01082d3b0718ca8
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPF:YGzl5wjRQBBOsP1QMOtEvwDpjgarA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2