56e019acd6d57936f3303f07be47a38b65b88833172046f619186b7324560d9d | Triage

Sharing

General

Target

2024-10-10_e7dfb01cc284e070d54e1dff8a2f2a85_cryptolocker
Size

33KB
Sample

241010-drta9swekd
MD5

e7dfb01cc284e070d54e1dff8a2f2a85
SHA1

529f0f44acd0c4ef27ff53370aa57d33b60da60e
SHA256

56e019acd6d57936f3303f07be47a38b65b88833172046f619186b7324560d9d
SHA512

ad878c298cac8011d289045c71e82a4d98927bd013e6823156b9218698b4f5ac9c797b893528b21c9bf9d171e1974b2888c28a48be6059274d08ea6bc54166fd
SSDEEP

384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGOFg:bG74zYcgT/Ekd0ryfjo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_e7dfb01cc284e070d54e1dff8a2f2a85_cryptolocker
- Size
  
  33KB
- MD5
  
  e7dfb01cc284e070d54e1dff8a2f2a85
- SHA1
  
  529f0f44acd0c4ef27ff53370aa57d33b60da60e
- SHA256
  
  56e019acd6d57936f3303f07be47a38b65b88833172046f619186b7324560d9d
- SHA512
  
  ad878c298cac8011d289045c71e82a4d98927bd013e6823156b9218698b4f5ac9c797b893528b21c9bf9d171e1974b2888c28a48be6059274d08ea6bc54166fd
- SSDEEP
  
  384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGOFg:bG74zYcgT/Ekd0ryfjo
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2