4d07ace20885b7d33d3a5338f046703eacb2fab948ef6a49262807c34fc450b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_ad94f646c631b4e1f83a52ed876364ef_cryptolocker
Size

57KB
Sample

241013-jbs88azbjn
MD5

ad94f646c631b4e1f83a52ed876364ef
SHA1

83d2743f146b1486cc4ee202898ef0f7dd425588
SHA256

4d07ace20885b7d33d3a5338f046703eacb2fab948ef6a49262807c34fc450b4
SHA512

862489dfcf3bd6eed5eddaf266d841e969cd1d02310236e6dcd4f708c7e9da48d36da4d088bd0f4db69fd80428f872c846116b7efa75e9e0e2ff961e85d50904
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/cM7:X6a+SOtEvwDpjBrOj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_ad94f646c631b4e1f83a52ed876364ef_cryptolocker
- Size
  
  57KB
- MD5
  
  ad94f646c631b4e1f83a52ed876364ef
- SHA1
  
  83d2743f146b1486cc4ee202898ef0f7dd425588
- SHA256
  
  4d07ace20885b7d33d3a5338f046703eacb2fab948ef6a49262807c34fc450b4
- SHA512
  
  862489dfcf3bd6eed5eddaf266d841e969cd1d02310236e6dcd4f708c7e9da48d36da4d088bd0f4db69fd80428f872c846116b7efa75e9e0e2ff961e85d50904
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/cM7:X6a+SOtEvwDpjBrOj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2