b288e1ab236fa82741330ad4c8e3ba592e754d7b0a3bd5b1ba11d3f741dd72da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_a0c764fb69bcc7eafd71feab2f2f9cb3_cryptolocker
Size

49KB
Sample

241018-ca78essfnl
MD5

a0c764fb69bcc7eafd71feab2f2f9cb3
SHA1

d13beb4ba945c7842fb880523fdaf19dae3db4b7
SHA256

b288e1ab236fa82741330ad4c8e3ba592e754d7b0a3bd5b1ba11d3f741dd72da
SHA512

364099caa31297d8cc07deb6982faa68a14631d637e7a786842a469a827f5152164c5ab3dcdb4684ec8764dccb79058201fb90eb4adbb36cbf45f85919222833
SSDEEP

768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcAD:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_a0c764fb69bcc7eafd71feab2f2f9cb3_cryptolocker
- Size
  
  49KB
- MD5
  
  a0c764fb69bcc7eafd71feab2f2f9cb3
- SHA1
  
  d13beb4ba945c7842fb880523fdaf19dae3db4b7
- SHA256
  
  b288e1ab236fa82741330ad4c8e3ba592e754d7b0a3bd5b1ba11d3f741dd72da
- SHA512
  
  364099caa31297d8cc07deb6982faa68a14631d637e7a786842a469a827f5152164c5ab3dcdb4684ec8764dccb79058201fb90eb4adbb36cbf45f85919222833
- SSDEEP
  
  768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcAD:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2