41145291b4e6f5ef9b8519782836be73fc3cce0732912805171925af01351b61 | Triage

Sharing

General

Target

2024-10-12_10b1cb14d95c98924fb2cf38dc28175e_cryptolocker
Size

36KB
Sample

241012-dzb2ys1alg
MD5

10b1cb14d95c98924fb2cf38dc28175e
SHA1

bc98e93767309b3e5266ab5c89a40015b98aa5a2
SHA256

41145291b4e6f5ef9b8519782836be73fc3cce0732912805171925af01351b61
SHA512

8c379fa1ff250926a438cafb06f5a12cfeddbe26353cfbecd4b1588a20e786f611eb96bf496bbc2c260a98723d0063b3573eb9115d09201a1a987baf7ccf2751
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50invBHQ6Nv:bAvJCYOOvbRPDEgXrNekd7l94inZQ63l

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_10b1cb14d95c98924fb2cf38dc28175e_cryptolocker
- Size
  
  36KB
- MD5
  
  10b1cb14d95c98924fb2cf38dc28175e
- SHA1
  
  bc98e93767309b3e5266ab5c89a40015b98aa5a2
- SHA256
  
  41145291b4e6f5ef9b8519782836be73fc3cce0732912805171925af01351b61
- SHA512
  
  8c379fa1ff250926a438cafb06f5a12cfeddbe26353cfbecd4b1588a20e786f611eb96bf496bbc2c260a98723d0063b3573eb9115d09201a1a987baf7ccf2751
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50invBHQ6Nv:bAvJCYOOvbRPDEgXrNekd7l94inZQ63l
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2