d133aea005ec0ca77a3a7fd1e62d32649a6a9d4e4cb902a5a7aa2821d42e5c07 | Triage

Sharing

General

Target

2024-10-12_6c42d6f74058b021cfaf5b5097e28a10_cryptolocker
Size

63KB
Sample

241012-rbgjestfrc
MD5

6c42d6f74058b021cfaf5b5097e28a10
SHA1

2f9f44d710bcc69fa1b3c52becfb90a8f36217d6
SHA256

d133aea005ec0ca77a3a7fd1e62d32649a6a9d4e4cb902a5a7aa2821d42e5c07
SHA512

a7cc063c263dc4b4703a9abeaad09f5013b7dee5b1985272fb48b1fd72d85155551453ed0707b2314cae3c83ad0281759657368799b1b4e9eec1f3718aa8b985
SSDEEP

768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9P:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_6c42d6f74058b021cfaf5b5097e28a10_cryptolocker
- Size
  
  63KB
- MD5
  
  6c42d6f74058b021cfaf5b5097e28a10
- SHA1
  
  2f9f44d710bcc69fa1b3c52becfb90a8f36217d6
- SHA256
  
  d133aea005ec0ca77a3a7fd1e62d32649a6a9d4e4cb902a5a7aa2821d42e5c07
- SHA512
  
  a7cc063c263dc4b4703a9abeaad09f5013b7dee5b1985272fb48b1fd72d85155551453ed0707b2314cae3c83ad0281759657368799b1b4e9eec1f3718aa8b985
- SSDEEP
  
  768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9P:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2