2ca3004acd8074cc460fad0f22b83cf48bad51556041fc3febcbbf75440befdd | Triage

Sharing

General

Target

2024-10-12_4861c85fd850f9ecac34416516f5fb78_cryptolocker
Size

47KB
Sample

241012-c4dwnssfqk
MD5

4861c85fd850f9ecac34416516f5fb78
SHA1

09cdfa13a1ee4ce7ff3e9e544e32efeda1b265f4
SHA256

2ca3004acd8074cc460fad0f22b83cf48bad51556041fc3febcbbf75440befdd
SHA512

2e8dc4ac7a7509e7f0f6f98701cf41b6081a2c5172fbfce5f3a1612cbbb346867a076b513ba78b1418b1d2730ed21cd478a7240266cf37cc5acfbfdee4269ebe
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrj:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_4861c85fd850f9ecac34416516f5fb78_cryptolocker
- Size
  
  47KB
- MD5
  
  4861c85fd850f9ecac34416516f5fb78
- SHA1
  
  09cdfa13a1ee4ce7ff3e9e544e32efeda1b265f4
- SHA256
  
  2ca3004acd8074cc460fad0f22b83cf48bad51556041fc3febcbbf75440befdd
- SHA512
  
  2e8dc4ac7a7509e7f0f6f98701cf41b6081a2c5172fbfce5f3a1612cbbb346867a076b513ba78b1418b1d2730ed21cd478a7240266cf37cc5acfbfdee4269ebe
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrj:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2