7d69016dc2f06cfe52cfda9d588ea138421004f8aca7ecadd09cf3e4b97fb4be | Triage

Sharing

General

Target

2024-10-17_e19436d5850679295a9d21fc2a2fbd87_cryptolocker
Size

35KB
Sample

241017-s2b73awglr
MD5

e19436d5850679295a9d21fc2a2fbd87
SHA1

cc187dbfbfeb2b1e54e6b1d95d61d2fcd31172ef
SHA256

7d69016dc2f06cfe52cfda9d588ea138421004f8aca7ecadd09cf3e4b97fb4be
SHA512

4e4e037b53ed545c9c25a1554a921b8775ae6f4e2e174af615bddb86cd08e8285cba4663c7d96be09113cc96e987a7f5e7d5dffe883e4d939deb1dced06f996f
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRP:vj+jsMQMOtEvwDpj5HcSP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_e19436d5850679295a9d21fc2a2fbd87_cryptolocker
- Size
  
  35KB
- MD5
  
  e19436d5850679295a9d21fc2a2fbd87
- SHA1
  
  cc187dbfbfeb2b1e54e6b1d95d61d2fcd31172ef
- SHA256
  
  7d69016dc2f06cfe52cfda9d588ea138421004f8aca7ecadd09cf3e4b97fb4be
- SHA512
  
  4e4e037b53ed545c9c25a1554a921b8775ae6f4e2e174af615bddb86cd08e8285cba4663c7d96be09113cc96e987a7f5e7d5dffe883e4d939deb1dced06f996f
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRP:vj+jsMQMOtEvwDpj5HcSP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2