10e98647f55393adb06d9c117f7959daa318f21493d35e6866e2da046576e83f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_eb78e1e10ebae64302bf52d126562e5a_cryptolocker
Size

39KB
Sample

241013-3jalmasgme
MD5

eb78e1e10ebae64302bf52d126562e5a
SHA1

3c07db53ecb5e22b886873a4d7da71f44575d876
SHA256

10e98647f55393adb06d9c117f7959daa318f21493d35e6866e2da046576e83f
SHA512

ab625c8cbdc2931202445c0a7740cb41abd6da15d9ec98743c78c9d37e8121739fc3c8ed90ed09da0be5fed5889df8df679eebd3bfe6511757ab8535bcf2e145
SSDEEP

384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WcvOoR/:79inqyNR/QtOOtEvwDpjBKc5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_eb78e1e10ebae64302bf52d126562e5a_cryptolocker
- Size
  
  39KB
- MD5
  
  eb78e1e10ebae64302bf52d126562e5a
- SHA1
  
  3c07db53ecb5e22b886873a4d7da71f44575d876
- SHA256
  
  10e98647f55393adb06d9c117f7959daa318f21493d35e6866e2da046576e83f
- SHA512
  
  ab625c8cbdc2931202445c0a7740cb41abd6da15d9ec98743c78c9d37e8121739fc3c8ed90ed09da0be5fed5889df8df679eebd3bfe6511757ab8535bcf2e145
- SSDEEP
  
  384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WcvOoR/:79inqyNR/QtOOtEvwDpjBKc5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2