eef905ae98a6791de6bbef7f9a7fdddfd53c6c9c4e9186c66009cd9c9ce50fa4 | Triage

Sharing

General

Target

2024-10-13_2fbc1b2faef038ad3e7917a65f2bc2c3_cryptolocker
Size

36KB
Sample

241013-qt1vcatdrr
MD5

2fbc1b2faef038ad3e7917a65f2bc2c3
SHA1

0b885b35e4cba6761e93ff3a832b9c3fc632fde8
SHA256

eef905ae98a6791de6bbef7f9a7fdddfd53c6c9c4e9186c66009cd9c9ce50fa4
SHA512

8a7b71781eedadc622127830c0efe318a754c1490b848af631038d3f0fd24c071a049ebbdbd047ac7d09846f4cbdbdd8e917674005564aa9d281b8c9f9a27fb5
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B94IOMHo3sxP1HO:btB9g/WItCSsAGjX7r3BPOMHocM4v+j

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_2fbc1b2faef038ad3e7917a65f2bc2c3_cryptolocker
- Size
  
  36KB
- MD5
  
  2fbc1b2faef038ad3e7917a65f2bc2c3
- SHA1
  
  0b885b35e4cba6761e93ff3a832b9c3fc632fde8
- SHA256
  
  eef905ae98a6791de6bbef7f9a7fdddfd53c6c9c4e9186c66009cd9c9ce50fa4
- SHA512
  
  8a7b71781eedadc622127830c0efe318a754c1490b848af631038d3f0fd24c071a049ebbdbd047ac7d09846f4cbdbdd8e917674005564aa9d281b8c9f9a27fb5
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B94IOMHo3sxP1HO:btB9g/WItCSsAGjX7r3BPOMHocM4v+j
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2