fe3ca4a58f7099755c9c1a0a2addc1338a9a5785ce1af6f86f70d70f2a2ea5c9 | Triage

Sharing

General

Target

2024-10-12_d2cd9537ccaee461826965bae5aed046_cryptolocker
Size

58KB
Sample

241012-lr1z4syfkp
MD5

d2cd9537ccaee461826965bae5aed046
SHA1

4e13fab076a7fafe66eadfb4c9782eed2dfc6334
SHA256

fe3ca4a58f7099755c9c1a0a2addc1338a9a5785ce1af6f86f70d70f2a2ea5c9
SHA512

b03a327da91e8039028168e97ad369030ba80f2328ad33808835f81de3c6f9c7c21c11f00b843ccc4bfd590ad02f0754230d05a2c27c1c1c675b15f397abd28c
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9B:TCjsIOtEvwDpj5HE/OUHnSMYD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_d2cd9537ccaee461826965bae5aed046_cryptolocker
- Size
  
  58KB
- MD5
  
  d2cd9537ccaee461826965bae5aed046
- SHA1
  
  4e13fab076a7fafe66eadfb4c9782eed2dfc6334
- SHA256
  
  fe3ca4a58f7099755c9c1a0a2addc1338a9a5785ce1af6f86f70d70f2a2ea5c9
- SHA512
  
  b03a327da91e8039028168e97ad369030ba80f2328ad33808835f81de3c6f9c7c21c11f00b843ccc4bfd590ad02f0754230d05a2c27c1c1c675b15f397abd28c
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9B:TCjsIOtEvwDpj5HE/OUHnSMYD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2