f91a255f720871597202cc3cdd4704798495bfbac19d050cb2a77a77802276e4 | Triage

Sharing

General

Target

2024-10-14_1e513f37d500020c18bc1b1f29a5d4f3_cryptolocker
Size

43KB
Sample

241014-ykf3kstapa
MD5

1e513f37d500020c18bc1b1f29a5d4f3
SHA1

6bc6aa45dec4ecdb4f612d7022d9f7b71c01e4a8
SHA256

f91a255f720871597202cc3cdd4704798495bfbac19d050cb2a77a77802276e4
SHA512

3c5aee74d1d7746b1d6e13e7eb1999d16161c8302f42536e15e354700d66a54c560bc0df32ca902e3e6fca9a3f4883824ce0a6f3fff4e2fe15751e1e71f35c39
SSDEEP

768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YTtkPg:bgGYcA/53GAA6y37ip

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_1e513f37d500020c18bc1b1f29a5d4f3_cryptolocker
- Size
  
  43KB
- MD5
  
  1e513f37d500020c18bc1b1f29a5d4f3
- SHA1
  
  6bc6aa45dec4ecdb4f612d7022d9f7b71c01e4a8
- SHA256
  
  f91a255f720871597202cc3cdd4704798495bfbac19d050cb2a77a77802276e4
- SHA512
  
  3c5aee74d1d7746b1d6e13e7eb1999d16161c8302f42536e15e354700d66a54c560bc0df32ca902e3e6fca9a3f4883824ce0a6f3fff4e2fe15751e1e71f35c39
- SSDEEP
  
  768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YTtkPg:bgGYcA/53GAA6y37ip
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2