a7ce4e23584fa61d59937d1393450eb9c7c4a58ca29262c964cc84a03b123a4c | Triage

Sharing

General

Target

2024-10-12_af2c6ca156c979d7b72d2b9040ff5056_cryptolocker
Size

50KB
Sample

241012-fktdssyfqk
MD5

af2c6ca156c979d7b72d2b9040ff5056
SHA1

6a13e5a6b0d2df833967965e1792bd4dc1c82173
SHA256

a7ce4e23584fa61d59937d1393450eb9c7c4a58ca29262c964cc84a03b123a4c
SHA512

d91a10e2491e3483707737a8df2a86a78784a01b545423294638f9b323dbe4dc09154b7c142d58dc78939bb00aaae3d1ebeebb54b47421b8ff353c11f65b3eb6
SSDEEP

768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcBJP3B:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_af2c6ca156c979d7b72d2b9040ff5056_cryptolocker
- Size
  
  50KB
- MD5
  
  af2c6ca156c979d7b72d2b9040ff5056
- SHA1
  
  6a13e5a6b0d2df833967965e1792bd4dc1c82173
- SHA256
  
  a7ce4e23584fa61d59937d1393450eb9c7c4a58ca29262c964cc84a03b123a4c
- SHA512
  
  d91a10e2491e3483707737a8df2a86a78784a01b545423294638f9b323dbe4dc09154b7c142d58dc78939bb00aaae3d1ebeebb54b47421b8ff353c11f65b3eb6
- SSDEEP
  
  768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcBJP3B:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfR
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2