d0d199a3dd309311c5169d1630e0d942d3c1e8261aa5c5f6d2646035497e7081 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_4aa9c19ef7ef614b5ad6749bcbc66aa8_cryptolocker
Size

66KB
Sample

241018-avs8wsvhjh
MD5

4aa9c19ef7ef614b5ad6749bcbc66aa8
SHA1

76ecdddb24ac457f7f8dcd422cbdec150b3cbe62
SHA256

d0d199a3dd309311c5169d1630e0d942d3c1e8261aa5c5f6d2646035497e7081
SHA512

6b6dfe1c599cd5da9edb3b136ca60ac03f96cb38cb2ad0dd83155b0df732118b275a3142cbebde0a056e89ae9a08931e69145ba09662b8fa5cf20170bcf7a9b0
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKwh:DW60sllyWOtEvwDpjwF85L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_4aa9c19ef7ef614b5ad6749bcbc66aa8_cryptolocker
- Size
  
  66KB
- MD5
  
  4aa9c19ef7ef614b5ad6749bcbc66aa8
- SHA1
  
  76ecdddb24ac457f7f8dcd422cbdec150b3cbe62
- SHA256
  
  d0d199a3dd309311c5169d1630e0d942d3c1e8261aa5c5f6d2646035497e7081
- SHA512
  
  6b6dfe1c599cd5da9edb3b136ca60ac03f96cb38cb2ad0dd83155b0df732118b275a3142cbebde0a056e89ae9a08931e69145ba09662b8fa5cf20170bcf7a9b0
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKwh:DW60sllyWOtEvwDpjwF85L
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2