424c13189636d3c351a10cfbdfe0f1c18cc0dfd2d601bdcbb159915a28b0708f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_1b01f2416ac23c83b52cd21a5b38b092_cryptolocker
Size

35KB
Sample

241009-g8tvxaseja
MD5

1b01f2416ac23c83b52cd21a5b38b092
SHA1

19c30db8c1e7c612f63bd0fb022a39583948f027
SHA256

424c13189636d3c351a10cfbdfe0f1c18cc0dfd2d601bdcbb159915a28b0708f
SHA512

6dfe36022a4c1eac61967875c72f91a64fb2b389c3fc3ab589e74a25448f8e5d793179b37c6096c5595c5214f62440589911f0e5a72921dcacb0b2fdcdf7d9c3
SSDEEP

384:+cX+ni9VCr5nQI021q4VQBqURYpetOOtEvwDpjqIGRxzOP51FqQLicn3f3y5:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_1b01f2416ac23c83b52cd21a5b38b092_cryptolocker
- Size
  
  35KB
- MD5
  
  1b01f2416ac23c83b52cd21a5b38b092
- SHA1
  
  19c30db8c1e7c612f63bd0fb022a39583948f027
- SHA256
  
  424c13189636d3c351a10cfbdfe0f1c18cc0dfd2d601bdcbb159915a28b0708f
- SHA512
  
  6dfe36022a4c1eac61967875c72f91a64fb2b389c3fc3ab589e74a25448f8e5d793179b37c6096c5595c5214f62440589911f0e5a72921dcacb0b2fdcdf7d9c3
- SSDEEP
  
  384:+cX+ni9VCr5nQI021q4VQBqURYpetOOtEvwDpjqIGRxzOP51FqQLicn3f3y5:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvY
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2