2da0954fa2c90e10f56c0c644815aadc932466334d1523c5c3cd247afd7012f8 | Triage

Sharing

General

Target

2024-10-14_b5c37c2e4b3e7ebe73c29bcd99a7f8d3_cryptolocker
Size

46KB
Sample

241014-fk6dcstejr
MD5

b5c37c2e4b3e7ebe73c29bcd99a7f8d3
SHA1

61a9e4e12ca8bded83d3b28ae8f61c815597da67
SHA256

2da0954fa2c90e10f56c0c644815aadc932466334d1523c5c3cd247afd7012f8
SHA512

1b54e0d002a06b3798ceaa7b48d23ec5753c6182f9dd9554b049d151a6c701d216219425a3c5cf939eaf0cb9226c5c660b6666d53f5852f94e7fee5d809170fa
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8JT:bm74zYcgT/EkM0ryfjPdQZJT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_b5c37c2e4b3e7ebe73c29bcd99a7f8d3_cryptolocker
- Size
  
  46KB
- MD5
  
  b5c37c2e4b3e7ebe73c29bcd99a7f8d3
- SHA1
  
  61a9e4e12ca8bded83d3b28ae8f61c815597da67
- SHA256
  
  2da0954fa2c90e10f56c0c644815aadc932466334d1523c5c3cd247afd7012f8
- SHA512
  
  1b54e0d002a06b3798ceaa7b48d23ec5753c6182f9dd9554b049d151a6c701d216219425a3c5cf939eaf0cb9226c5c660b6666d53f5852f94e7fee5d809170fa
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8JT:bm74zYcgT/EkM0ryfjPdQZJT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2