b61dfa08ca37a0f32aaea86cc32a55ead8ef17ae2252ae7ff8ffbf01a35b214a | Triage

Sharing

General

Target

2024-10-13_cbe5a351e6aed2e075de0a349b86416e_cryptolocker
Size

46KB
Sample

241013-ehrlrascqr
MD5

cbe5a351e6aed2e075de0a349b86416e
SHA1

1053f70b188da992d1bbe2a2732897e476b49c60
SHA256

b61dfa08ca37a0f32aaea86cc32a55ead8ef17ae2252ae7ff8ffbf01a35b214a
SHA512

cc4f32e9be6fad794026b26662f2b4d078a5db3934685d32000ee5bad808d8188c1ee5b4291b204e4b3f20bbba5965712fd786a1e5297ea3abf6df49161bb39c
SSDEEP

384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/W/rJ+xLrs7cwcx4MWlNVg9:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_cbe5a351e6aed2e075de0a349b86416e_cryptolocker
- Size
  
  46KB
- MD5
  
  cbe5a351e6aed2e075de0a349b86416e
- SHA1
  
  1053f70b188da992d1bbe2a2732897e476b49c60
- SHA256
  
  b61dfa08ca37a0f32aaea86cc32a55ead8ef17ae2252ae7ff8ffbf01a35b214a
- SHA512
  
  cc4f32e9be6fad794026b26662f2b4d078a5db3934685d32000ee5bad808d8188c1ee5b4291b204e4b3f20bbba5965712fd786a1e5297ea3abf6df49161bb39c
- SSDEEP
  
  384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/W/rJ+xLrs7cwcx4MWlNVg9:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2