ca0887ed84eccdca31adc636bcb2b0c90ee8268d98ecafa4c3435ad8650208e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_e2a0d25c347c082c16c2ffcc672bddb7_cryptolocker
Size

57KB
Sample

241017-21w1hs1hlc
MD5

e2a0d25c347c082c16c2ffcc672bddb7
SHA1

4de4d1401edcb9be24f3251d71cf0481eb00051c
SHA256

ca0887ed84eccdca31adc636bcb2b0c90ee8268d98ecafa4c3435ad8650208e1
SHA512

74fa8ccd760734a84cc4293c76123da7c34dcf8e771be52232ed06c22201f97350d7d8cfcaaeeb9a782fe405da36238b2a424be23f59d8dd31d36777e66e1f23
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLA+RD:X6a+SOtEvwDpjBrOv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_e2a0d25c347c082c16c2ffcc672bddb7_cryptolocker
- Size
  
  57KB
- MD5
  
  e2a0d25c347c082c16c2ffcc672bddb7
- SHA1
  
  4de4d1401edcb9be24f3251d71cf0481eb00051c
- SHA256
  
  ca0887ed84eccdca31adc636bcb2b0c90ee8268d98ecafa4c3435ad8650208e1
- SHA512
  
  74fa8ccd760734a84cc4293c76123da7c34dcf8e771be52232ed06c22201f97350d7d8cfcaaeeb9a782fe405da36238b2a424be23f59d8dd31d36777e66e1f23
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLA+RD:X6a+SOtEvwDpjBrOv
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2