14079846a6aed26e169d01f9aa55e5e6f76cf78e224f279143ff6b71dbee45f2 | Triage

Sharing

General

Target

2024-10-13_6ebaf2221a56016459026f7da44156bc_cryptolocker
Size

43KB
Sample

241013-bcqkqavflm
MD5

6ebaf2221a56016459026f7da44156bc
SHA1

b8106b9beb8167fb4fc0dbd499627172a2077462
SHA256

14079846a6aed26e169d01f9aa55e5e6f76cf78e224f279143ff6b71dbee45f2
SHA512

3395b384809eb53c2aa13a3830b838edf1bb04af38bb7d390b9f9f75f44e0c36691a4f1039fe66e6e9167b2eff22ba8829814baeca545f36b87beefeda8f3d8f
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+M6mx:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+a

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_6ebaf2221a56016459026f7da44156bc_cryptolocker
- Size
  
  43KB
- MD5
  
  6ebaf2221a56016459026f7da44156bc
- SHA1
  
  b8106b9beb8167fb4fc0dbd499627172a2077462
- SHA256
  
  14079846a6aed26e169d01f9aa55e5e6f76cf78e224f279143ff6b71dbee45f2
- SHA512
  
  3395b384809eb53c2aa13a3830b838edf1bb04af38bb7d390b9f9f75f44e0c36691a4f1039fe66e6e9167b2eff22ba8829814baeca545f36b87beefeda8f3d8f
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+M6mx:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+a
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2