e0213e495b6540399ee1b19b4e01bf6dc56dfbfba83ee5bb4b6c2c4393d4ced4 | Triage

Sharing

General

Target

2024-10-14_b103e8c467f0b0bee500513979c88fd5_cryptolocker
Size

36KB
Sample

241014-fks32atejm
MD5

b103e8c467f0b0bee500513979c88fd5
SHA1

fc8ca693d3ab7c13c148a3842700190a7af705ec
SHA256

e0213e495b6540399ee1b19b4e01bf6dc56dfbfba83ee5bb4b6c2c4393d4ced4
SHA512

adff3a8616cdbe8c7441b073a7b1aeac5b569e4e9dacf2191aa63f897778fb4c130b2e2a145cc368cf6ef664c17501f7cf403292ea3b754999d89f13b673fa11
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLh:ZzFbxmLPWQMOtEvwDpjLeUh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_b103e8c467f0b0bee500513979c88fd5_cryptolocker
- Size
  
  36KB
- MD5
  
  b103e8c467f0b0bee500513979c88fd5
- SHA1
  
  fc8ca693d3ab7c13c148a3842700190a7af705ec
- SHA256
  
  e0213e495b6540399ee1b19b4e01bf6dc56dfbfba83ee5bb4b6c2c4393d4ced4
- SHA512
  
  adff3a8616cdbe8c7441b073a7b1aeac5b569e4e9dacf2191aa63f897778fb4c130b2e2a145cc368cf6ef664c17501f7cf403292ea3b754999d89f13b673fa11
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLh:ZzFbxmLPWQMOtEvwDpjLeUh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2