42c34fe97a4d976d1d40240dca6118318acd15a2274c99c6a3d3239cdc69269e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_1ec4d7cf3e8b697a89dba4d08a5dd1be_cryptolocker
Size

94KB
Sample

241017-2bbchszfmd
MD5

1ec4d7cf3e8b697a89dba4d08a5dd1be
SHA1

c85f4d36a8b8019a299e0558840de14b8e4b8fad
SHA256

42c34fe97a4d976d1d40240dca6118318acd15a2274c99c6a3d3239cdc69269e
SHA512

50e6dab06b109a9cad3b1dbbbd4b82ad26b20d0fdcbe202913616a1ba99c304722eb9608525fdfb305ad762e398fec6a62f9a23d0fc4f9b62a9b27e6f9106a05
SSDEEP

1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCh:26a+2OtEvwDpjtzG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_1ec4d7cf3e8b697a89dba4d08a5dd1be_cryptolocker
- Size
  
  94KB
- MD5
  
  1ec4d7cf3e8b697a89dba4d08a5dd1be
- SHA1
  
  c85f4d36a8b8019a299e0558840de14b8e4b8fad
- SHA256
  
  42c34fe97a4d976d1d40240dca6118318acd15a2274c99c6a3d3239cdc69269e
- SHA512
  
  50e6dab06b109a9cad3b1dbbbd4b82ad26b20d0fdcbe202913616a1ba99c304722eb9608525fdfb305ad762e398fec6a62f9a23d0fc4f9b62a9b27e6f9106a05
- SSDEEP
  
  1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCh:26a+2OtEvwDpjtzG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2