89a480abcc5d571014a95368cdc9e2e5fd147f21619df1efedef622cae251540 | Triage

Sharing

General

Target

2024-10-18_9329fea455e2a34b3dfcd35c8ebda75c_cryptolocker
Size

50KB
Sample

241018-b96m7sseqn
MD5

9329fea455e2a34b3dfcd35c8ebda75c
SHA1

47bc4f33dafecaa91daf6ccdf7ea4792f9bb1e37
SHA256

89a480abcc5d571014a95368cdc9e2e5fd147f21619df1efedef622cae251540
SHA512

15976d8e094a4e58145d5015c6b29a1dd803c2f24dbcd8d1ddb075145cedf127217aa05ebe7e7eb59555eb82703b261ec5c46d9ea0ba2a71ac684f410acf418e
SSDEEP

768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+wuH:bIDOw9a0Dwo3P1ojvUSD4PInyD8H

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_9329fea455e2a34b3dfcd35c8ebda75c_cryptolocker
- Size
  
  50KB
- MD5
  
  9329fea455e2a34b3dfcd35c8ebda75c
- SHA1
  
  47bc4f33dafecaa91daf6ccdf7ea4792f9bb1e37
- SHA256
  
  89a480abcc5d571014a95368cdc9e2e5fd147f21619df1efedef622cae251540
- SHA512
  
  15976d8e094a4e58145d5015c6b29a1dd803c2f24dbcd8d1ddb075145cedf127217aa05ebe7e7eb59555eb82703b261ec5c46d9ea0ba2a71ac684f410acf418e
- SSDEEP
  
  768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+wuH:bIDOw9a0Dwo3P1ojvUSD4PInyD8H
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2