d1037ffa948d7f8b25a0a3693a0c789e3e5e55eee8382665510c2d3f2b1a6ff8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_aaf4db19ff5c3f7ac7fb4e0b82f8e7e2_cryptolocker
Size

42KB
Sample

241018-cc1lcszdlb
MD5

aaf4db19ff5c3f7ac7fb4e0b82f8e7e2
SHA1

faf8f3a6ebd3c2dbd6cb60c90e564382a6c12372
SHA256

d1037ffa948d7f8b25a0a3693a0c789e3e5e55eee8382665510c2d3f2b1a6ff8
SHA512

5650a106d04450524abc1d2955fc22d5d579af69013a1fe8cf8d8339f60e923be21b8ecc7c89b1bfc545195b308eadd7d46c8544b8e810cb3d2ca4e9d4b85bf4
SSDEEP

768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpL:79mqyNhQMOtEvwDpjBzcku

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_aaf4db19ff5c3f7ac7fb4e0b82f8e7e2_cryptolocker
- Size
  
  42KB
- MD5
  
  aaf4db19ff5c3f7ac7fb4e0b82f8e7e2
- SHA1
  
  faf8f3a6ebd3c2dbd6cb60c90e564382a6c12372
- SHA256
  
  d1037ffa948d7f8b25a0a3693a0c789e3e5e55eee8382665510c2d3f2b1a6ff8
- SHA512
  
  5650a106d04450524abc1d2955fc22d5d579af69013a1fe8cf8d8339f60e923be21b8ecc7c89b1bfc545195b308eadd7d46c8544b8e810cb3d2ca4e9d4b85bf4
- SSDEEP
  
  768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpL:79mqyNhQMOtEvwDpjBzcku
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2