0a2470a6e7a201e62585871c2f0c7436a8422aa37ca2601ff9586811b3635eef | Triage

Sharing

General

Target

2024-10-13_3cb74328ca87337e0c2d0387c4201dcc_cryptolocker
Size

51KB
Sample

241013-g5mx7axdkn
MD5

3cb74328ca87337e0c2d0387c4201dcc
SHA1

bccb5b819c9d16f55f09195d5df3cf442fc5c38c
SHA256

0a2470a6e7a201e62585871c2f0c7436a8422aa37ca2601ff9586811b3635eef
SHA512

49c8daf79105b6afcc1eb8576c64c59c7fbfa175b8c4f01e2e11e98f85cbaf8302cd0bd5b1b18e4ddb44975c81ca1ad7671ad543b47ef79b35c9604af4f0896a
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvsTF:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvIF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_3cb74328ca87337e0c2d0387c4201dcc_cryptolocker
- Size
  
  51KB
- MD5
  
  3cb74328ca87337e0c2d0387c4201dcc
- SHA1
  
  bccb5b819c9d16f55f09195d5df3cf442fc5c38c
- SHA256
  
  0a2470a6e7a201e62585871c2f0c7436a8422aa37ca2601ff9586811b3635eef
- SHA512
  
  49c8daf79105b6afcc1eb8576c64c59c7fbfa175b8c4f01e2e11e98f85cbaf8302cd0bd5b1b18e4ddb44975c81ca1ad7671ad543b47ef79b35c9604af4f0896a
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvsTF:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvIF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2