2b6ff656a4179c2ca675afe0bfd95a87e6de3a87346ffa6edc95d6fcc21a8478 | Triage

Sharing

General

Target

2024-10-12_ca94f188964e8c28cb6991efa949206c_cryptolocker
Size

82KB
Sample

241012-hmaetayflc
MD5

ca94f188964e8c28cb6991efa949206c
SHA1

29a819e72257adc5889e2b2d1ea13368be0b88a1
SHA256

2b6ff656a4179c2ca675afe0bfd95a87e6de3a87346ffa6edc95d6fcc21a8478
SHA512

3c9b8a494636680af26e49b27f195ff7636153c3aeaaacd5f5dc7ab0fe779d30c59927d66a13bdd62bb2624b24dc9a6cb6e58a75b1e5618d63dc61dc741e1f4b
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvW:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8W

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_ca94f188964e8c28cb6991efa949206c_cryptolocker
- Size
  
  82KB
- MD5
  
  ca94f188964e8c28cb6991efa949206c
- SHA1
  
  29a819e72257adc5889e2b2d1ea13368be0b88a1
- SHA256
  
  2b6ff656a4179c2ca675afe0bfd95a87e6de3a87346ffa6edc95d6fcc21a8478
- SHA512
  
  3c9b8a494636680af26e49b27f195ff7636153c3aeaaacd5f5dc7ab0fe779d30c59927d66a13bdd62bb2624b24dc9a6cb6e58a75b1e5618d63dc61dc741e1f4b
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvW:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8W
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2