b709ee55c165c9eb9417f25cb2e8f21b589ea4fdd129d86461d383e87090e52d | Triage

Sharing

General

Target

2024-10-09_19f4ed3372ae6924f96b87615d6de146_cryptolocker
Size

60KB
Sample

241009-d4tgssvfja
MD5

19f4ed3372ae6924f96b87615d6de146
SHA1

9da2e9fcb095c4ef6adf3ef97b5a3fcf1fff6d38
SHA256

b709ee55c165c9eb9417f25cb2e8f21b589ea4fdd129d86461d383e87090e52d
SHA512

a28aaeef8664125387fadeb66fb0838a637de964777c2bd0ea24782aebdcd193cf6301051ec9501539d5a562d99709a9f732be9b04b2c6649eee1463f1e161ed
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDS08:aq7tdgI2MyzNORQtOflIwoHNV2XBFV70

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_19f4ed3372ae6924f96b87615d6de146_cryptolocker
- Size
  
  60KB
- MD5
  
  19f4ed3372ae6924f96b87615d6de146
- SHA1
  
  9da2e9fcb095c4ef6adf3ef97b5a3fcf1fff6d38
- SHA256
  
  b709ee55c165c9eb9417f25cb2e8f21b589ea4fdd129d86461d383e87090e52d
- SHA512
  
  a28aaeef8664125387fadeb66fb0838a637de964777c2bd0ea24782aebdcd193cf6301051ec9501539d5a562d99709a9f732be9b04b2c6649eee1463f1e161ed
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDS08:aq7tdgI2MyzNORQtOflIwoHNV2XBFV70
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2