9243b7e4eaa3ec8852f1751610ce90320d1cca15245d3efea8fcb7d7b74bed82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-15_55ab1d8786e019109d6684f47ddaf023_cryptolocker
Size

42KB
Sample

241015-c4jrxszerh
MD5

55ab1d8786e019109d6684f47ddaf023
SHA1

812629864c9ca6e212ec5949755edb6f71e4cf42
SHA256

9243b7e4eaa3ec8852f1751610ce90320d1cca15245d3efea8fcb7d7b74bed82
SHA512

c647b6ab5da0c5f57fe57600e416240a44981f91299fb276a5bbe3f6a5a06c67285929b6d74a72a294248ba67640bc726e4f2e11c6277b6d746689996dbf4d63
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axRVZHQ:V6QFElP6n+gMQMOtEvwDpjyaYaLw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-15_55ab1d8786e019109d6684f47ddaf023_cryptolocker
- Size
  
  42KB
- MD5
  
  55ab1d8786e019109d6684f47ddaf023
- SHA1
  
  812629864c9ca6e212ec5949755edb6f71e4cf42
- SHA256
  
  9243b7e4eaa3ec8852f1751610ce90320d1cca15245d3efea8fcb7d7b74bed82
- SHA512
  
  c647b6ab5da0c5f57fe57600e416240a44981f91299fb276a5bbe3f6a5a06c67285929b6d74a72a294248ba67640bc726e4f2e11c6277b6d746689996dbf4d63
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axRVZHQ:V6QFElP6n+gMQMOtEvwDpjyaYaLw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2