9634746aa2a175770dfc8bfbc7f204e743a1dbc47155c1d27788b107a9e211bd | Triage

Sharing

General

Target

2024-10-09_84b981cdaacea5f0157b1991f0e1c0f2_cryptolocker
Size

67KB
Sample

241009-kp12nazhlr
MD5

84b981cdaacea5f0157b1991f0e1c0f2
SHA1

10132f3114cf303ede0df1975ae6e5b08f9d9d0b
SHA256

9634746aa2a175770dfc8bfbc7f204e743a1dbc47155c1d27788b107a9e211bd
SHA512

a3987e3d4b6b501b9d807c715886afd9de631b67e4d5780ebf4d8e398140711e88f0b479bc0b1c2773f932c39162c99e9a8d808596444a4d4f3e22d77b4ddfb7
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsijfK:BbdDmjr+OtEvwDpjM8b

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_84b981cdaacea5f0157b1991f0e1c0f2_cryptolocker
- Size
  
  67KB
- MD5
  
  84b981cdaacea5f0157b1991f0e1c0f2
- SHA1
  
  10132f3114cf303ede0df1975ae6e5b08f9d9d0b
- SHA256
  
  9634746aa2a175770dfc8bfbc7f204e743a1dbc47155c1d27788b107a9e211bd
- SHA512
  
  a3987e3d4b6b501b9d807c715886afd9de631b67e4d5780ebf4d8e398140711e88f0b479bc0b1c2773f932c39162c99e9a8d808596444a4d4f3e22d77b4ddfb7
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsijfK:BbdDmjr+OtEvwDpjM8b
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2