fb1c85a5cac8770cf39d669e4d43fa59a00186ac7a7ab52802adc88ca3aa3881 | Triage

Sharing

General

Target

2024-10-10_172da8b0a61a9e79b0af83fc7eee4046_cryptolocker
Size

50KB
Sample

241010-c84mws1dln
MD5

172da8b0a61a9e79b0af83fc7eee4046
SHA1

5e9b116097a9d0212e8e2d48a0a4dec7a9e8ddac
SHA256

fb1c85a5cac8770cf39d669e4d43fa59a00186ac7a7ab52802adc88ca3aa3881
SHA512

15e9658ae102d1a324988216d8a02b7b1a21375cca4c1cb33ac1ce900aa71519aa31b649db590b71ed8bc1ee0283938568eaf64de15bf3f741b525b08f8cb4ca
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITI:26Q0ElP6G+gBQMOtEvwDpjgWMl7TI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_172da8b0a61a9e79b0af83fc7eee4046_cryptolocker
- Size
  
  50KB
- MD5
  
  172da8b0a61a9e79b0af83fc7eee4046
- SHA1
  
  5e9b116097a9d0212e8e2d48a0a4dec7a9e8ddac
- SHA256
  
  fb1c85a5cac8770cf39d669e4d43fa59a00186ac7a7ab52802adc88ca3aa3881
- SHA512
  
  15e9658ae102d1a324988216d8a02b7b1a21375cca4c1cb33ac1ce900aa71519aa31b649db590b71ed8bc1ee0283938568eaf64de15bf3f741b525b08f8cb4ca
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITI:26Q0ElP6G+gBQMOtEvwDpjgWMl7TI
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2