43af4f3f224cda55d43d72a9a620a52d91c9cba2cb68aa84ae7fb7d96cf1c53a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-15_f421ca41b9a3d2fcedc26776f5b1dccc_cryptolocker
Size

5.5MB
Sample

241015-c1swestfqj
MD5

f421ca41b9a3d2fcedc26776f5b1dccc
SHA1

d97885656364e5bf58fcb4ea721e639831142d90
SHA256

43af4f3f224cda55d43d72a9a620a52d91c9cba2cb68aa84ae7fb7d96cf1c53a
SHA512

4adc61c43b1d6bdca6c03792df7898d3963e75c3957e9a2a79547bcd0c9d103e18d42d2ff5efb163e7ca8b49353c91388719af399a237c5081401d76552f9fe7
SSDEEP

98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+UfX:otTvgz73XMpxDbcwYvt3sFa4OX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-15_f421ca41b9a3d2fcedc26776f5b1dccc_cryptolocker
- Size
  
  5.5MB
- MD5
  
  f421ca41b9a3d2fcedc26776f5b1dccc
- SHA1
  
  d97885656364e5bf58fcb4ea721e639831142d90
- SHA256
  
  43af4f3f224cda55d43d72a9a620a52d91c9cba2cb68aa84ae7fb7d96cf1c53a
- SHA512
  
  4adc61c43b1d6bdca6c03792df7898d3963e75c3957e9a2a79547bcd0c9d103e18d42d2ff5efb163e7ca8b49353c91388719af399a237c5081401d76552f9fe7
- SSDEEP
  
  98304:ot1QKvyjzO6B3DenIMmzyxD++XsBq+JUieGNt3sB/a1Ed9m+UfX:otTvgz73XMpxDbcwYvt3sFa4OX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2