01311adba5918ef2552e27e98bc688f6b00d7a4759aa7960aab8298f0b67c28e | Triage

Sharing

General

Target

2024-10-14_d38f5613638a2cb53295f6451ef99c1e_cryptolocker
Size

48KB
Sample

241014-jcfdrasanf
MD5

d38f5613638a2cb53295f6451ef99c1e
SHA1

8245da85d20eb68b6cc1a682d8437b03197cfe92
SHA256

01311adba5918ef2552e27e98bc688f6b00d7a4759aa7960aab8298f0b67c28e
SHA512

47dc428c37cb3d8c00f87daa7f069ca2aa64438d981410764fc53365b0d4e11aa37861795158f36b9d6ad28f4eeef3a277e7ced59af75b011050c0b1c54cb590
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr7:y6QFElP6n+gMQMOtEvwDpjbizbR9XwzX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_d38f5613638a2cb53295f6451ef99c1e_cryptolocker
- Size
  
  48KB
- MD5
  
  d38f5613638a2cb53295f6451ef99c1e
- SHA1
  
  8245da85d20eb68b6cc1a682d8437b03197cfe92
- SHA256
  
  01311adba5918ef2552e27e98bc688f6b00d7a4759aa7960aab8298f0b67c28e
- SHA512
  
  47dc428c37cb3d8c00f87daa7f069ca2aa64438d981410764fc53365b0d4e11aa37861795158f36b9d6ad28f4eeef3a277e7ced59af75b011050c0b1c54cb590
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zr7:y6QFElP6n+gMQMOtEvwDpjbizbR9XwzX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2