471fbd8fc7c452254842b65d88937e5bfd5bed36757cb91a35fb4bb40ee7d8ca | Triage

Sharing

General

Target

2024-10-10_ec56fb86a4fb7669c9624277ed2e6297_cryptolocker
Size

47KB
Sample

241010-gt9b2szake
MD5

ec56fb86a4fb7669c9624277ed2e6297
SHA1

53efc62ab5e25780aef244b1b63086eece572935
SHA256

471fbd8fc7c452254842b65d88937e5bfd5bed36757cb91a35fb4bb40ee7d8ca
SHA512

675bb87671955cd6e44bc2ab5bbf3e6fba74df9c5773e15e95b7c49ae8f10c80122103f539d73611c660962a7ffe33a0e71a0d5b4ad73c614a932bdb26165ae0
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXw:V6QFElP6n+gMQMOtEvwDpjyaHaXrw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_ec56fb86a4fb7669c9624277ed2e6297_cryptolocker
- Size
  
  47KB
- MD5
  
  ec56fb86a4fb7669c9624277ed2e6297
- SHA1
  
  53efc62ab5e25780aef244b1b63086eece572935
- SHA256
  
  471fbd8fc7c452254842b65d88937e5bfd5bed36757cb91a35fb4bb40ee7d8ca
- SHA512
  
  675bb87671955cd6e44bc2ab5bbf3e6fba74df9c5773e15e95b7c49ae8f10c80122103f539d73611c660962a7ffe33a0e71a0d5b4ad73c614a932bdb26165ae0
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXw:V6QFElP6n+gMQMOtEvwDpjyaHaXrw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2