a311788feeffb0fb40b0119f1444e7d7b03359cb6efa4f40f3dc542368959092 | Triage

Sharing

General

Target

2024-10-14_fef38b32d5016ded3570e421f7eddeee_cryptolocker
Size

44KB
Sample

241014-b7fn1avhjc
MD5

fef38b32d5016ded3570e421f7eddeee
SHA1

172c0974207b34be21a3c6e7ded38a06178ecc7f
SHA256

a311788feeffb0fb40b0119f1444e7d7b03359cb6efa4f40f3dc542368959092
SHA512

61b7a9dbb57916b669ad9c212004706a6b179bbd12d5009c65d21db22762b197ebcb7b9c093b2edd5090745bd2c27ea277b42b33eef4c325db701b9077505bf6
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0Z:6j+1NMOtEvwDpjrR2XabMm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_fef38b32d5016ded3570e421f7eddeee_cryptolocker
- Size
  
  44KB
- MD5
  
  fef38b32d5016ded3570e421f7eddeee
- SHA1
  
  172c0974207b34be21a3c6e7ded38a06178ecc7f
- SHA256
  
  a311788feeffb0fb40b0119f1444e7d7b03359cb6efa4f40f3dc542368959092
- SHA512
  
  61b7a9dbb57916b669ad9c212004706a6b179bbd12d5009c65d21db22762b197ebcb7b9c093b2edd5090745bd2c27ea277b42b33eef4c325db701b9077505bf6
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0Z:6j+1NMOtEvwDpjrR2XabMm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2