9868645e4ca3563f0b6ffb2e3175fa0523236192fb5667110d4fdd8fd1257096 | Triage

Sharing

General

Target

2024-10-17_9ea703d4ece20f1176b272c46c4d3a27_cryptolocker
Size

50KB
Sample

241017-ryyffsvbqq
MD5

9ea703d4ece20f1176b272c46c4d3a27
SHA1

b8731f9dc71c4c548d93b7f32faa35f0710413a5
SHA256

9868645e4ca3563f0b6ffb2e3175fa0523236192fb5667110d4fdd8fd1257096
SHA512

c1666576075dbe1c67da570e80d7b5d40142579a9b9a49f3174592c81b222e5c050d831adb564924da8c1e8e1641705b6ddaf59647ccffe374ceedd18ff34414
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXpQenhuTi:V6QFElP6n+gMQMOtEvwDpjeJQ7pojkRe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_9ea703d4ece20f1176b272c46c4d3a27_cryptolocker
- Size
  
  50KB
- MD5
  
  9ea703d4ece20f1176b272c46c4d3a27
- SHA1
  
  b8731f9dc71c4c548d93b7f32faa35f0710413a5
- SHA256
  
  9868645e4ca3563f0b6ffb2e3175fa0523236192fb5667110d4fdd8fd1257096
- SHA512
  
  c1666576075dbe1c67da570e80d7b5d40142579a9b9a49f3174592c81b222e5c050d831adb564924da8c1e8e1641705b6ddaf59647ccffe374ceedd18ff34414
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXpQenhuTi:V6QFElP6n+gMQMOtEvwDpjeJQ7pojkRe
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2