93e51251016afc09409f4c7836be1f11666e7045e05167d9e588030ef5e0b230 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_04caa1d62b84360c4ffffdb4d1e9ab9a_cryptolocker
Size

46KB
Sample

241013-ctjzyaycql
MD5

04caa1d62b84360c4ffffdb4d1e9ab9a
SHA1

99e2c1cb6a1e0813f5ef6f4f6a42b0a75bd67ba9
SHA256

93e51251016afc09409f4c7836be1f11666e7045e05167d9e588030ef5e0b230
SHA512

afe6ed2b058ffa239fc2b4803d1b109388461cc8406c10b5e258976ff936c776ea444171342fda280dabacb300e74b9a338135dd85d448936e9d2d5d344e1225
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUknql:bm74zYcgT/EkM0ryfjdnql

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_04caa1d62b84360c4ffffdb4d1e9ab9a_cryptolocker
- Size
  
  46KB
- MD5
  
  04caa1d62b84360c4ffffdb4d1e9ab9a
- SHA1
  
  99e2c1cb6a1e0813f5ef6f4f6a42b0a75bd67ba9
- SHA256
  
  93e51251016afc09409f4c7836be1f11666e7045e05167d9e588030ef5e0b230
- SHA512
  
  afe6ed2b058ffa239fc2b4803d1b109388461cc8406c10b5e258976ff936c776ea444171342fda280dabacb300e74b9a338135dd85d448936e9d2d5d344e1225
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUknql:bm74zYcgT/EkM0ryfjdnql
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2