728a5b17c8dc3e25359cd1df788b2411a1593c80fd03c9fd3a52498b8df3f288 | Triage

Sharing

General

Target

2024-10-13_e1114a3737935239d9b6b702f8378d40_cryptolocker
Size

67KB
Sample

241013-kjxr2sxejg
MD5

e1114a3737935239d9b6b702f8378d40
SHA1

cca097060cf997518f4fa001b86ce47a477dd921
SHA256

728a5b17c8dc3e25359cd1df788b2411a1593c80fd03c9fd3a52498b8df3f288
SHA512

3cab6a3322e4337ed6a17bc9859254265732923368b7e7a72758d4f00ef2ae4432c0bd35138649a786e450c27b6344e4655b9445ef68dca5f5cc6daa26e593e9
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsijY:BbdDmjr+OtEvwDpjM8V

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_e1114a3737935239d9b6b702f8378d40_cryptolocker
- Size
  
  67KB
- MD5
  
  e1114a3737935239d9b6b702f8378d40
- SHA1
  
  cca097060cf997518f4fa001b86ce47a477dd921
- SHA256
  
  728a5b17c8dc3e25359cd1df788b2411a1593c80fd03c9fd3a52498b8df3f288
- SHA512
  
  3cab6a3322e4337ed6a17bc9859254265732923368b7e7a72758d4f00ef2ae4432c0bd35138649a786e450c27b6344e4655b9445ef68dca5f5cc6daa26e593e9
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsijY:BbdDmjr+OtEvwDpjM8V
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2