4ddead3816329b6f9799c697c8cca0fae3865942d7a53bd6f3ff31541c99d6af | Triage

Sharing

General

Target

2024-10-15_540028fb19f2f34da329c7d73f97c29e_cryptolocker
Size

56KB
Sample

241015-a1w7qsvcpc
MD5

540028fb19f2f34da329c7d73f97c29e
SHA1

1569c365dd815c8c3345a41327c4bdc5cc6622cd
SHA256

4ddead3816329b6f9799c697c8cca0fae3865942d7a53bd6f3ff31541c99d6af
SHA512

13ed2b82e4cff14c21a101140c622857999e9b2bf439ae663e7ba380e856d7df52a6f375ac901c3f837101bfc2d463e060ef43101460ce5645be9987d1d83269
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMKm/:TCjsIOtEvwDpj5HE/OUHnSMe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-15_540028fb19f2f34da329c7d73f97c29e_cryptolocker
- Size
  
  56KB
- MD5
  
  540028fb19f2f34da329c7d73f97c29e
- SHA1
  
  1569c365dd815c8c3345a41327c4bdc5cc6622cd
- SHA256
  
  4ddead3816329b6f9799c697c8cca0fae3865942d7a53bd6f3ff31541c99d6af
- SHA512
  
  13ed2b82e4cff14c21a101140c622857999e9b2bf439ae663e7ba380e856d7df52a6f375ac901c3f837101bfc2d463e060ef43101460ce5645be9987d1d83269
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMKm/:TCjsIOtEvwDpj5HE/OUHnSMe
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2