63e3a8674a89cc617993f1bd84a224f7b3bee1ece51140259b88c54090f51764 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_1dcb1f25b5327cabe59608d6b2a0892d_cryptolocker
Size

34KB
Sample

241012-dlkf6szbmb
MD5

1dcb1f25b5327cabe59608d6b2a0892d
SHA1

bb80d5d0539d41fd8e69ccd046cbd9ce5b3327cf
SHA256

63e3a8674a89cc617993f1bd84a224f7b3bee1ece51140259b88c54090f51764
SHA512

a92b388632d02e57bfcb9b00d324bb844bd1dcebc25d6e6da18e8f2fe6ff383278194d68b0f1e7790dc984dbba461b2a429d8eb9a104529d874129cd72143612
SSDEEP

384:+cX+ni9VCr5nQI021q4VQBqURYpetOOtEvwDpjqIGRxzOP51FqQLicn3f3y3:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_1dcb1f25b5327cabe59608d6b2a0892d_cryptolocker
- Size
  
  34KB
- MD5
  
  1dcb1f25b5327cabe59608d6b2a0892d
- SHA1
  
  bb80d5d0539d41fd8e69ccd046cbd9ce5b3327cf
- SHA256
  
  63e3a8674a89cc617993f1bd84a224f7b3bee1ece51140259b88c54090f51764
- SHA512
  
  a92b388632d02e57bfcb9b00d324bb844bd1dcebc25d6e6da18e8f2fe6ff383278194d68b0f1e7790dc984dbba461b2a429d8eb9a104529d874129cd72143612
- SSDEEP
  
  384:+cX+ni9VCr5nQI021q4VQBqURYpetOOtEvwDpjqIGRxzOP51FqQLicn3f3y3:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2