e9b4783fc6fd8db372cd01a9d3ec324de7e2593e0937ca0f0fcc16deedfb2512 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_16aaecaae7c31bb547e23b2d5b119eb6_cryptolocker
Size

72KB
Sample

241012-cwv5zsxerg
MD5

16aaecaae7c31bb547e23b2d5b119eb6
SHA1

3b191a4f9663176e0f20f3cb2478b692c5173341
SHA256

e9b4783fc6fd8db372cd01a9d3ec324de7e2593e0937ca0f0fcc16deedfb2512
SHA512

67c510d781179b8988d94f7334564072a3867919f37a005afe35be6f0117918ebd22d78934713d2cc5e7de84e981d3336f1ba7c258115a21e59d02f5fa32a8da
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R1:vj+jsMQMOtEvwDpj5HZYTjipvF24N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_16aaecaae7c31bb547e23b2d5b119eb6_cryptolocker
- Size
  
  72KB
- MD5
  
  16aaecaae7c31bb547e23b2d5b119eb6
- SHA1
  
  3b191a4f9663176e0f20f3cb2478b692c5173341
- SHA256
  
  e9b4783fc6fd8db372cd01a9d3ec324de7e2593e0937ca0f0fcc16deedfb2512
- SHA512
  
  67c510d781179b8988d94f7334564072a3867919f37a005afe35be6f0117918ebd22d78934713d2cc5e7de84e981d3336f1ba7c258115a21e59d02f5fa32a8da
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R1:vj+jsMQMOtEvwDpj5HZYTjipvF24N
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2