44e98529079934ecb6931ea951611e75c5cce7744df5c330e82471362e6832ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_a14be033cc89ed82ef8a2a332df76e3b_cryptolocker
Size

36KB
Sample

241017-sy9ddsshpe
MD5

a14be033cc89ed82ef8a2a332df76e3b
SHA1

a2245a3b31596d94ded107e826149e314e5e8c32
SHA256

44e98529079934ecb6931ea951611e75c5cce7744df5c330e82471362e6832ad
SHA512

a5c81bef867f65f697b1917ceebe49c605c05e4abc47e728a249d5c8df79b9f3d380385ba3d2948d7010d45710629359975ef9d8a8f810ea1d46f9a5a153d59f
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLM:ZzFbxmLPWQMOtEvwDpjLeUM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_a14be033cc89ed82ef8a2a332df76e3b_cryptolocker
- Size
  
  36KB
- MD5
  
  a14be033cc89ed82ef8a2a332df76e3b
- SHA1
  
  a2245a3b31596d94ded107e826149e314e5e8c32
- SHA256
  
  44e98529079934ecb6931ea951611e75c5cce7744df5c330e82471362e6832ad
- SHA512
  
  a5c81bef867f65f697b1917ceebe49c605c05e4abc47e728a249d5c8df79b9f3d380385ba3d2948d7010d45710629359975ef9d8a8f810ea1d46f9a5a153d59f
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQLM:ZzFbxmLPWQMOtEvwDpjLeUM
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2