b7110dbeb8a05babe569f9ac23d52b777733a88e1b96221594d93907e1daee8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_41a28f186402fcd61481748a2589c1d6_cryptolocker
Size

25KB
Sample

241012-w5bbqavclg
MD5

41a28f186402fcd61481748a2589c1d6
SHA1

6fd1a571795f015c2dab1c9cfe26da91e845cc5b
SHA256

b7110dbeb8a05babe569f9ac23d52b777733a88e1b96221594d93907e1daee8c
SHA512

1f2e084d7e9f1f1a60a39a581a1154fac66d5be34efe2f582302ffc5d38039bbc67148b433e9a247d42cc7d98fd3f3efbedfc5d9f1b0839f583a437ab0b64834
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/P4QtOOtEvwDpjucw:ZzFbxmLP4QMOtEvwDpjucw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-12_41a28f186402fcd61481748a2589c1d6_cryptolocker
- Size
  
  25KB
- MD5
  
  41a28f186402fcd61481748a2589c1d6
- SHA1
  
  6fd1a571795f015c2dab1c9cfe26da91e845cc5b
- SHA256
  
  b7110dbeb8a05babe569f9ac23d52b777733a88e1b96221594d93907e1daee8c
- SHA512
  
  1f2e084d7e9f1f1a60a39a581a1154fac66d5be34efe2f582302ffc5d38039bbc67148b433e9a247d42cc7d98fd3f3efbedfc5d9f1b0839f583a437ab0b64834
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/P4QtOOtEvwDpjucw:ZzFbxmLP4QMOtEvwDpjucw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2