f1a5b06869ae1638bbad3e5786d0340affdbaca4c540186aab0f4206330a517a | Triage

Sharing

General

Target

2024-10-13_fb5b0225da15727f67d29a5b477d3d10_cryptolocker
Size

48KB
Sample

241013-ghkjjssbkh
MD5

fb5b0225da15727f67d29a5b477d3d10
SHA1

e47423c08ff5aea73250ced9e26590e9cdf1b44a
SHA256

f1a5b06869ae1638bbad3e5786d0340affdbaca4c540186aab0f4206330a517a
SHA512

323830aab742e3d905f7e05c210c2d01e0f2432695b3159a44e5660dde315a2d454526225386d5cda9e8bdaa898c4c88796764802b70f9166caf4c5cd8dc1b2f
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITYaW:26Q0ElP6G+gBQMOtEvwDpjgWMl7TYaW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_fb5b0225da15727f67d29a5b477d3d10_cryptolocker
- Size
  
  48KB
- MD5
  
  fb5b0225da15727f67d29a5b477d3d10
- SHA1
  
  e47423c08ff5aea73250ced9e26590e9cdf1b44a
- SHA256
  
  f1a5b06869ae1638bbad3e5786d0340affdbaca4c540186aab0f4206330a517a
- SHA512
  
  323830aab742e3d905f7e05c210c2d01e0f2432695b3159a44e5660dde315a2d454526225386d5cda9e8bdaa898c4c88796764802b70f9166caf4c5cd8dc1b2f
- SSDEEP
  
  768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITYaW:26Q0ElP6G+gBQMOtEvwDpjgWMl7TYaW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2