b6aeaf9cad326177d666a89e7e916d8ccc862a0392fd9101b831a323ff2345d3 | Triage

Sharing

General

Target

2024-10-17_c1803d24144d29f96e30371dffa9f008_cryptolocker
Size

59KB
Sample

241017-ybgyhsscrf
MD5

c1803d24144d29f96e30371dffa9f008
SHA1

652944e7ab6ccc1c293975887e303741f64af2d4
SHA256

b6aeaf9cad326177d666a89e7e916d8ccc862a0392fd9101b831a323ff2345d3
SHA512

09393e8956e1d5db6d40ce8197eebe16b41adf9e9a84572030f2973b13a2cc77dfe978a64e024d3f2de3bfc92e71611e4508716a0622ab2e9aade0d35aae3705
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMT73:TCjsIOtEvwDpj5HE/OUHnSMg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_c1803d24144d29f96e30371dffa9f008_cryptolocker
- Size
  
  59KB
- MD5
  
  c1803d24144d29f96e30371dffa9f008
- SHA1
  
  652944e7ab6ccc1c293975887e303741f64af2d4
- SHA256
  
  b6aeaf9cad326177d666a89e7e916d8ccc862a0392fd9101b831a323ff2345d3
- SHA512
  
  09393e8956e1d5db6d40ce8197eebe16b41adf9e9a84572030f2973b13a2cc77dfe978a64e024d3f2de3bfc92e71611e4508716a0622ab2e9aade0d35aae3705
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMT73:TCjsIOtEvwDpj5HE/OUHnSMg
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2