12197eb9cf7d68894b7bf4d09b3e67c1b15b4d8f4555ad323d37141f7bb40858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_45ad3b8fc03260fc56f4db9385313055_cryptolocker
Size

85KB
Sample

241009-hek7cazakp
MD5

45ad3b8fc03260fc56f4db9385313055
SHA1

c7a5e1afb9c1459c6a7e595283bfdba228d20821
SHA256

12197eb9cf7d68894b7bf4d09b3e67c1b15b4d8f4555ad323d37141f7bb40858
SHA512

22247c7ad5e926fa0d5ed310fcd467b5f1203f685b1c4c90800ed427c3da93399c131c7930f18fad9f0cbdbb2c0233af65a0099781c64b32b38976deb51f91b2
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcD:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8AcD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_45ad3b8fc03260fc56f4db9385313055_cryptolocker
- Size
  
  85KB
- MD5
  
  45ad3b8fc03260fc56f4db9385313055
- SHA1
  
  c7a5e1afb9c1459c6a7e595283bfdba228d20821
- SHA256
  
  12197eb9cf7d68894b7bf4d09b3e67c1b15b4d8f4555ad323d37141f7bb40858
- SHA512
  
  22247c7ad5e926fa0d5ed310fcd467b5f1203f685b1c4c90800ed427c3da93399c131c7930f18fad9f0cbdbb2c0233af65a0099781c64b32b38976deb51f91b2
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcD:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8AcD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2