f803eea928ebcc3a250062f0c55f2771ae86ac6d2bcc98f37b57031ba9655d48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_43ed0ed222f1c6359010d4a3ec964c8d_cryptolocker
Size

53KB
Sample

241012-he9vpssgpp
MD5

43ed0ed222f1c6359010d4a3ec964c8d
SHA1

2037a485506e4fccd23ce9183788202db9854577
SHA256

f803eea928ebcc3a250062f0c55f2771ae86ac6d2bcc98f37b57031ba9655d48
SHA512

1042591244e2ed7e9df42c74350dcdcd01bbe1cea203fc0231e13024540aa26c95ec8fdd1b93ae96d029d6645d813c1ed83842f8fa796acbf82ed7cd830a677e
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoARe:xj+VGMOtEvwDpjubEgXk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_43ed0ed222f1c6359010d4a3ec964c8d_cryptolocker
- Size
  
  53KB
- MD5
  
  43ed0ed222f1c6359010d4a3ec964c8d
- SHA1
  
  2037a485506e4fccd23ce9183788202db9854577
- SHA256
  
  f803eea928ebcc3a250062f0c55f2771ae86ac6d2bcc98f37b57031ba9655d48
- SHA512
  
  1042591244e2ed7e9df42c74350dcdcd01bbe1cea203fc0231e13024540aa26c95ec8fdd1b93ae96d029d6645d813c1ed83842f8fa796acbf82ed7cd830a677e
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoARe:xj+VGMOtEvwDpjubEgXk
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2