43021caa35dbdb92ef1384630a586a7f88582b299ee6e53af2236d4a889e0aa7 | Triage

Sharing

General

Target

2024-10-14_76050872e4d7a7b5c21c7c1c662188ba_cryptolocker
Size

40KB
Sample

241014-d67r7ssbkk
MD5

76050872e4d7a7b5c21c7c1c662188ba
SHA1

10d27a13d6161d0a28485d905ac473de6fc18aad
SHA256

43021caa35dbdb92ef1384630a586a7f88582b299ee6e53af2236d4a889e0aa7
SHA512

fdefec89def27d343be6c7cf179c9ed6c883bd0b76d0b84ac1691c36f34979d92adb4aada43641d350c0c812fe558d7423f01db1f9440f30e3012060007e9d81
SSDEEP

768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qNFl:fT+hsMQMOtEvwDpjoIHe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_76050872e4d7a7b5c21c7c1c662188ba_cryptolocker
- Size
  
  40KB
- MD5
  
  76050872e4d7a7b5c21c7c1c662188ba
- SHA1
  
  10d27a13d6161d0a28485d905ac473de6fc18aad
- SHA256
  
  43021caa35dbdb92ef1384630a586a7f88582b299ee6e53af2236d4a889e0aa7
- SHA512
  
  fdefec89def27d343be6c7cf179c9ed6c883bd0b76d0b84ac1691c36f34979d92adb4aada43641d350c0c812fe558d7423f01db1f9440f30e3012060007e9d81
- SSDEEP
  
  768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qNFl:fT+hsMQMOtEvwDpjoIHe
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2