32df43a1f12a43407df28bb3bb7b492d5e66b04e0ae717b842a4ac93264bc4c0 | Triage

Sharing

General

Target

2024-10-13_ea1a87a01716123e7412245fa03da63d_cryptolocker
Size

42KB
Sample

241013-crxg9aycjq
MD5

ea1a87a01716123e7412245fa03da63d
SHA1

6db3eeabef6fd5b536193d8adfd2f90cc99d52b7
SHA256

32df43a1f12a43407df28bb3bb7b492d5e66b04e0ae717b842a4ac93264bc4c0
SHA512

791934e173916d1b4e8e3b487751dbb2bc29b107dfb086f2a2a4a001f44130583a4ea9a0d0bbe174982755d8eeab8fc04827ea0ceac7ceae07f0cf7e6c518861
SSDEEP

768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG056:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_ea1a87a01716123e7412245fa03da63d_cryptolocker
- Size
  
  42KB
- MD5
  
  ea1a87a01716123e7412245fa03da63d
- SHA1
  
  6db3eeabef6fd5b536193d8adfd2f90cc99d52b7
- SHA256
  
  32df43a1f12a43407df28bb3bb7b492d5e66b04e0ae717b842a4ac93264bc4c0
- SHA512
  
  791934e173916d1b4e8e3b487751dbb2bc29b107dfb086f2a2a4a001f44130583a4ea9a0d0bbe174982755d8eeab8fc04827ea0ceac7ceae07f0cf7e6c518861
- SSDEEP
  
  768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG056:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2