968f480249a02ff4dc6c4e96b1202402d02b1e61e2364d405b3ebb445165e1a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_29f3cce8ab2c2206e4b57b0b58cb2849_cryptolocker
Size

80KB
Sample

241013-x4gmsatfla
MD5

29f3cce8ab2c2206e4b57b0b58cb2849
SHA1

cfaf9e1323922b4121c3a8abcba33f390ea4dc14
SHA256

968f480249a02ff4dc6c4e96b1202402d02b1e61e2364d405b3ebb445165e1a3
SHA512

70a75e5959d69e25d6bc6da31fa17fad063c381283e416dc038d7c22e99053785db20a3b80d8493d209c892cb42646fa054c768a5314228d421a05d2175694aa
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktNI:X6a+SOtEvwDpjBZYvQd2X

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-13_29f3cce8ab2c2206e4b57b0b58cb2849_cryptolocker
- Size
  
  80KB
- MD5
  
  29f3cce8ab2c2206e4b57b0b58cb2849
- SHA1
  
  cfaf9e1323922b4121c3a8abcba33f390ea4dc14
- SHA256
  
  968f480249a02ff4dc6c4e96b1202402d02b1e61e2364d405b3ebb445165e1a3
- SHA512
  
  70a75e5959d69e25d6bc6da31fa17fad063c381283e416dc038d7c22e99053785db20a3b80d8493d209c892cb42646fa054c768a5314228d421a05d2175694aa
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktNI:X6a+SOtEvwDpjBZYvQd2X
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2