720cb657d51e08863d75a9d4a4aa0c777aec0769005696a885ef9a6b9e6dc896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_490eb87a8af84e31918cd907d0bd026a_cryptolocker
Size

56KB
Sample

241018-d75dgaxhkq
MD5

490eb87a8af84e31918cd907d0bd026a
SHA1

7ea25388cf306a156a8dfe895880bd10d3abe281
SHA256

720cb657d51e08863d75a9d4a4aa0c777aec0769005696a885ef9a6b9e6dc896
SHA512

467933a078d1fd30467f365e0aedd1f20b95f6db39bff933115875d0db28a003d32bc7923bd2d3da038872351c30d6c42f0fe4cf50388a9a014d8ae8cbb5cd97
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb614P:BbdDmjr+OtEvwDpjM0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_490eb87a8af84e31918cd907d0bd026a_cryptolocker
- Size
  
  56KB
- MD5
  
  490eb87a8af84e31918cd907d0bd026a
- SHA1
  
  7ea25388cf306a156a8dfe895880bd10d3abe281
- SHA256
  
  720cb657d51e08863d75a9d4a4aa0c777aec0769005696a885ef9a6b9e6dc896
- SHA512
  
  467933a078d1fd30467f365e0aedd1f20b95f6db39bff933115875d0db28a003d32bc7923bd2d3da038872351c30d6c42f0fe4cf50388a9a014d8ae8cbb5cd97
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb614P:BbdDmjr+OtEvwDpjM0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2