493225382996fd09e3392fddc3d2d702776e9dcd474c7863c0e98a58a2d11231 | Triage

Sharing

General

Target

2024-10-09_51022e25e4872bfbaf2013e82624dfbc_cryptolocker
Size

53KB
Sample

241009-e83fyaxfnn
MD5

51022e25e4872bfbaf2013e82624dfbc
SHA1

4cf76463ac7a6da2526e17f77d7f2c221bb6c0eb
SHA256

493225382996fd09e3392fddc3d2d702776e9dcd474c7863c0e98a58a2d11231
SHA512

7b43515a83c46c8059c45af73d675965d7b509c418b2b247a1c7bdb03876a16a53859a87585de8eaebee9f8fe73765b3203214293668e1d6b3551c7151c21172
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJYwo:ZVxkGOtEvwDpjcd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_51022e25e4872bfbaf2013e82624dfbc_cryptolocker
- Size
  
  53KB
- MD5
  
  51022e25e4872bfbaf2013e82624dfbc
- SHA1
  
  4cf76463ac7a6da2526e17f77d7f2c221bb6c0eb
- SHA256
  
  493225382996fd09e3392fddc3d2d702776e9dcd474c7863c0e98a58a2d11231
- SHA512
  
  7b43515a83c46c8059c45af73d675965d7b509c418b2b247a1c7bdb03876a16a53859a87585de8eaebee9f8fe73765b3203214293668e1d6b3551c7151c21172
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJYwo:ZVxkGOtEvwDpjcd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2