b4071c35cab39fef017da43175ca11eecd823913199498f8c3f023391786145f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_43def853cb114cee4da61dc50577cd37_cryptolocker
Size

43KB
Sample

241014-g6kt8a1dkb
MD5

43def853cb114cee4da61dc50577cd37
SHA1

a2a5e0ba5de67660df034ee2668aa0276932372e
SHA256

b4071c35cab39fef017da43175ca11eecd823913199498f8c3f023391786145f
SHA512

67c9ffdc59faa8ebfefd4d1c2c5e317ca864d46b9e1b114e484b2db0b8439dcfd773b158e0ed604d6ce54f3a58f9b838f5a28a7ce207229b25a3dadd52a2cf79
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA/Q:bCDOw9aMDooc+vA/Q

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_43def853cb114cee4da61dc50577cd37_cryptolocker
- Size
  
  43KB
- MD5
  
  43def853cb114cee4da61dc50577cd37
- SHA1
  
  a2a5e0ba5de67660df034ee2668aa0276932372e
- SHA256
  
  b4071c35cab39fef017da43175ca11eecd823913199498f8c3f023391786145f
- SHA512
  
  67c9ffdc59faa8ebfefd4d1c2c5e317ca864d46b9e1b114e484b2db0b8439dcfd773b158e0ed604d6ce54f3a58f9b838f5a28a7ce207229b25a3dadd52a2cf79
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA/Q:bCDOw9aMDooc+vA/Q
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2