52ad45ff9eba6f2442fe9a7cbb93012bffa551e8d22a315454aad10c7b8407f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_5ff4421003553857c881f1d109e7637b_cryptolocker
Size

46KB
Sample

241017-txvpaaxfkq
MD5

5ff4421003553857c881f1d109e7637b
SHA1

bc99cd4ed42ae5f62021ee31594d7a77528873d9
SHA256

52ad45ff9eba6f2442fe9a7cbb93012bffa551e8d22a315454aad10c7b8407f4
SHA512

b2e333b836bc6923cf313f16a283c6565ca9c91c9a8407300ae91c02694bd5e5e58de5b66719de0d767eba59259fdedc6bb8b13879ace5589df2b0ef4298693a
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuM/k:vj+jsMQMOtEvwDpj5Hczer5ixuM/k

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_5ff4421003553857c881f1d109e7637b_cryptolocker
- Size
  
  46KB
- MD5
  
  5ff4421003553857c881f1d109e7637b
- SHA1
  
  bc99cd4ed42ae5f62021ee31594d7a77528873d9
- SHA256
  
  52ad45ff9eba6f2442fe9a7cbb93012bffa551e8d22a315454aad10c7b8407f4
- SHA512
  
  b2e333b836bc6923cf313f16a283c6565ca9c91c9a8407300ae91c02694bd5e5e58de5b66719de0d767eba59259fdedc6bb8b13879ace5589df2b0ef4298693a
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuM/k:vj+jsMQMOtEvwDpj5Hczer5ixuM/k
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2