488dd4827dd52f3f60e14fe19863ef4764eaf9545ec2fe0f738ad30873c065c9 | Triage

Sharing

General

Target

2024-10-17_8dce65a1bb7aace1bf24392ad54e8603_cryptolocker
Size

56KB
Sample

241017-nt2qjayhjq
MD5

8dce65a1bb7aace1bf24392ad54e8603
SHA1

fddf6f54802bcd1b867ff9480b33e82b8f015ee2
SHA256

488dd4827dd52f3f60e14fe19863ef4764eaf9545ec2fe0f738ad30873c065c9
SHA512

451eeff3422f8d2ba90e8c4753cc674a94d6a990ce7431e762f95b6f5c08fce8b5f3007f31c9a0ac1c1828fe6270a225f1950ea18f6d650bff2824360eb221f4
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6140:BbdDmjr+OtEvwDpjMP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_8dce65a1bb7aace1bf24392ad54e8603_cryptolocker
- Size
  
  56KB
- MD5
  
  8dce65a1bb7aace1bf24392ad54e8603
- SHA1
  
  fddf6f54802bcd1b867ff9480b33e82b8f015ee2
- SHA256
  
  488dd4827dd52f3f60e14fe19863ef4764eaf9545ec2fe0f738ad30873c065c9
- SHA512
  
  451eeff3422f8d2ba90e8c4753cc674a94d6a990ce7431e762f95b6f5c08fce8b5f3007f31c9a0ac1c1828fe6270a225f1950ea18f6d650bff2824360eb221f4
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb6140:BbdDmjr+OtEvwDpjMP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2