c1273a0abbbc9dcefc29e177f56e9b7f84416e119f6a7920026baad1c7bb7fb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_ed2014b523822d6df88fdd72123ef721_cryptolocker
Size

47KB
Sample

241013-dafzlszcjm
MD5

ed2014b523822d6df88fdd72123ef721
SHA1

a289d92acf465d44bf011145dc69cdbd443e6b72
SHA256

c1273a0abbbc9dcefc29e177f56e9b7f84416e119f6a7920026baad1c7bb7fb6
SHA512

eda4cfba9cd5d802ddb9b7302711a46bac67f01aab0e44379ca2551694e01ddc10836997355fa2556e0355c783f9eddf40868d35fbc0d5e76b744da77828d15f
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJlq:6j+1NMOtEvwDpjrRraJs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_ed2014b523822d6df88fdd72123ef721_cryptolocker
- Size
  
  47KB
- MD5
  
  ed2014b523822d6df88fdd72123ef721
- SHA1
  
  a289d92acf465d44bf011145dc69cdbd443e6b72
- SHA256
  
  c1273a0abbbc9dcefc29e177f56e9b7f84416e119f6a7920026baad1c7bb7fb6
- SHA512
  
  eda4cfba9cd5d802ddb9b7302711a46bac67f01aab0e44379ca2551694e01ddc10836997355fa2556e0355c783f9eddf40868d35fbc0d5e76b744da77828d15f
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJlq:6j+1NMOtEvwDpjrRraJs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2