f11e6373aac41c4f224b417a31c1fa0c06b07066b977fe02234e8a28eae5c12c | Triage

Sharing

General

Target

2024-10-18_35f21d9f92c6df07c896c94ec8f0fd31_cryptolocker
Size

37KB
Sample

241018-ath2javgmg
MD5

35f21d9f92c6df07c896c94ec8f0fd31
SHA1

c62c49c8143c95f00564e0d63f1abe19dc423b1d
SHA256

f11e6373aac41c4f224b417a31c1fa0c06b07066b977fe02234e8a28eae5c12c
SHA512

d29c8749d051da56824f42941ced7c56ca69fe0b1292c979667a49c2d62bda1e7bcb7b8cb7c1d1ab3b7048f58db1f0c7036833c18f4e870689901312f9871ca2
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLen7CDdL:ZzFbxmLPWQMOtEvwDpjLeWJL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_35f21d9f92c6df07c896c94ec8f0fd31_cryptolocker
- Size
  
  37KB
- MD5
  
  35f21d9f92c6df07c896c94ec8f0fd31
- SHA1
  
  c62c49c8143c95f00564e0d63f1abe19dc423b1d
- SHA256
  
  f11e6373aac41c4f224b417a31c1fa0c06b07066b977fe02234e8a28eae5c12c
- SHA512
  
  d29c8749d051da56824f42941ced7c56ca69fe0b1292c979667a49c2d62bda1e7bcb7b8cb7c1d1ab3b7048f58db1f0c7036833c18f4e870689901312f9871ca2
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLen7CDdL:ZzFbxmLPWQMOtEvwDpjLeWJL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2