10df00ed4c37a298415b510b3e5b9f1463a37d9a470aa6f688e723b6c95b4b09 | Triage

Sharing

General

Target

2024-10-15_ba47dfa4940d5446958488466d66de64_cryptolocker
Size

36KB
Sample

241015-d82c7sxbjj
MD5

ba47dfa4940d5446958488466d66de64
SHA1

f8d5ebb44054c7a8cff50f897cf4a6f8b0f151a4
SHA256

10df00ed4c37a298415b510b3e5b9f1463a37d9a470aa6f688e723b6c95b4b09
SHA512

9655693202b2e7d83f2e1d1e9a8f8f2dffbe29bb629d7f1bfd0d868c33a4a2c4042029f4e52ace7ab3f16b5b95e79e8840851c4ed04acd9e88ee1f367b23d09b
SSDEEP

768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmUi:bxNrC7kYo1Fxf2rYPLi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-15_ba47dfa4940d5446958488466d66de64_cryptolocker
- Size
  
  36KB
- MD5
  
  ba47dfa4940d5446958488466d66de64
- SHA1
  
  f8d5ebb44054c7a8cff50f897cf4a6f8b0f151a4
- SHA256
  
  10df00ed4c37a298415b510b3e5b9f1463a37d9a470aa6f688e723b6c95b4b09
- SHA512
  
  9655693202b2e7d83f2e1d1e9a8f8f2dffbe29bb629d7f1bfd0d868c33a4a2c4042029f4e52ace7ab3f16b5b95e79e8840851c4ed04acd9e88ee1f367b23d09b
- SSDEEP
  
  768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmUi:bxNrC7kYo1Fxf2rYPLi
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2