f0cfdcb49b125d9c38b605424e08046a6a69954ed7637cf8ffae2218bd50cf4e | Triage

Sharing

General

Target

2024-10-10_eb840ead21f8c02b8cf3929418921b05_cryptolocker
Size

48KB
Sample

241010-gff4cayfkb
MD5

eb840ead21f8c02b8cf3929418921b05
SHA1

0d1293f850050e5966763e046af2febb11dccd29
SHA256

f0cfdcb49b125d9c38b605424e08046a6a69954ed7637cf8ffae2218bd50cf4e
SHA512

748c446c5ff576be4f0e40b297b9d0eb6545736eeab0f0fcc5ad082ba7cffafd7dcbebd68b1daf0be2c998d79cd04d30c26495aae9f0e9494723a0384d851411
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAz:P6QFElP6k+MRQMOtEvwDpjBQpVX8Az

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_eb840ead21f8c02b8cf3929418921b05_cryptolocker
- Size
  
  48KB
- MD5
  
  eb840ead21f8c02b8cf3929418921b05
- SHA1
  
  0d1293f850050e5966763e046af2febb11dccd29
- SHA256
  
  f0cfdcb49b125d9c38b605424e08046a6a69954ed7637cf8ffae2218bd50cf4e
- SHA512
  
  748c446c5ff576be4f0e40b297b9d0eb6545736eeab0f0fcc5ad082ba7cffafd7dcbebd68b1daf0be2c998d79cd04d30c26495aae9f0e9494723a0384d851411
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAz:P6QFElP6k+MRQMOtEvwDpjBQpVX8Az
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2