743b6028bb3b36493fcbf349685156d2a88a86d03008940908bdf606ab64c980 | Triage

Sharing

General

Target

2024-10-09_4c2dca53dcb8d68dac6a5a9c771c9622_cryptolocker
Size

48KB
Sample

241009-hfsykstcrh
MD5

4c2dca53dcb8d68dac6a5a9c771c9622
SHA1

e97659c66c89c1955193f9de8594388b53a8c3b7
SHA256

743b6028bb3b36493fcbf349685156d2a88a86d03008940908bdf606ab64c980
SHA512

3bdde099a734f0bb84472f2f2d45e8415bf1819ca31210f694a7e521cc344dd19a9c697c228fdc04c6dac7cfbe951737f73cb3b32642f08411d89901b0d9fe29
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatH:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_4c2dca53dcb8d68dac6a5a9c771c9622_cryptolocker
- Size
  
  48KB
- MD5
  
  4c2dca53dcb8d68dac6a5a9c771c9622
- SHA1
  
  e97659c66c89c1955193f9de8594388b53a8c3b7
- SHA256
  
  743b6028bb3b36493fcbf349685156d2a88a86d03008940908bdf606ab64c980
- SHA512
  
  3bdde099a734f0bb84472f2f2d45e8415bf1819ca31210f694a7e521cc344dd19a9c697c228fdc04c6dac7cfbe951737f73cb3b32642f08411d89901b0d9fe29
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatH:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2