c71b68a2c91662fb18b6d09160ff652bef5a9f07063cf19e2a2d6ed535983e69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_905b0fc5ff1cbf136bf2b9e11d4662d1_cryptolocker
Size

29KB
Sample

241014-fg27jatdnm
MD5

905b0fc5ff1cbf136bf2b9e11d4662d1
SHA1

250a07f952c89ed407f203ca868e887845d29622
SHA256

c71b68a2c91662fb18b6d09160ff652bef5a9f07063cf19e2a2d6ed535983e69
SHA512

6aef0c634f46da215f8c0946d0bdbe3d3e8b2b37675ac1d5852fd01ba62d90d4f5a7d3c007d467431396e1e26347db9ff233d3ee75c54904838c385482971c60
SSDEEP

768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIO/xB:q0zizzOSxMOtEvwDpj/arP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_905b0fc5ff1cbf136bf2b9e11d4662d1_cryptolocker
- Size
  
  29KB
- MD5
  
  905b0fc5ff1cbf136bf2b9e11d4662d1
- SHA1
  
  250a07f952c89ed407f203ca868e887845d29622
- SHA256
  
  c71b68a2c91662fb18b6d09160ff652bef5a9f07063cf19e2a2d6ed535983e69
- SHA512
  
  6aef0c634f46da215f8c0946d0bdbe3d3e8b2b37675ac1d5852fd01ba62d90d4f5a7d3c007d467431396e1e26347db9ff233d3ee75c54904838c385482971c60
- SSDEEP
  
  768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIO/xB:q0zizzOSxMOtEvwDpj/arP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2