8603e8c06151f8f15451896e53d2ac8bff96fc1d163475f77c8a22cf0919b040 | Triage

Sharing

General

Target

2024-10-09_604f6d3f4592957034f4a92d12b02802_cryptolocker
Size

82KB
Sample

241009-qdx4hsveqm
MD5

604f6d3f4592957034f4a92d12b02802
SHA1

0543373b27bcabe17b55fc5818ab547de5a2419a
SHA256

8603e8c06151f8f15451896e53d2ac8bff96fc1d163475f77c8a22cf0919b040
SHA512

20f5dcf3b63fcecc00f8de93c9b001a68d26963390d305b5e937822bffb66816bf8a615e55ef0fe41702696e86e1845dd1cdd3a2c3d14f1323e27f9003427a96
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUv1o:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-09_604f6d3f4592957034f4a92d12b02802_cryptolocker
- Size
  
  82KB
- MD5
  
  604f6d3f4592957034f4a92d12b02802
- SHA1
  
  0543373b27bcabe17b55fc5818ab547de5a2419a
- SHA256
  
  8603e8c06151f8f15451896e53d2ac8bff96fc1d163475f77c8a22cf0919b040
- SHA512
  
  20f5dcf3b63fcecc00f8de93c9b001a68d26963390d305b5e937822bffb66816bf8a615e55ef0fe41702696e86e1845dd1cdd3a2c3d14f1323e27f9003427a96
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUv1o:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2