9a5c18d07a4457dbafa536705a50f062e44e8d0b5e137dc53f6e9b01eedf15a7 | Triage

Sharing

General

Target

2024-10-18_d35fe31d131bbf64de059959bb74fe4d_cryptolocker
Size

54KB
Sample

241018-dbeg6ssfkh
MD5

d35fe31d131bbf64de059959bb74fe4d
SHA1

1acb2522e4c49fb788e05c88af34f7d27a65452a
SHA256

9a5c18d07a4457dbafa536705a50f062e44e8d0b5e137dc53f6e9b01eedf15a7
SHA512

6ceaa2e3551fca85c4a512b38358b1be14a0e2d4321288d49ce786b7e358be0836242f53a252bf3e64c8b4843d1b920a305db0e4f2b9fb06b025a6e9cfc49ab4
SSDEEP

768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRszDr6KAWv:79mqyNhQMOtEvwDpjBxe8TpXRSDeK7v

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_d35fe31d131bbf64de059959bb74fe4d_cryptolocker
- Size
  
  54KB
- MD5
  
  d35fe31d131bbf64de059959bb74fe4d
- SHA1
  
  1acb2522e4c49fb788e05c88af34f7d27a65452a
- SHA256
  
  9a5c18d07a4457dbafa536705a50f062e44e8d0b5e137dc53f6e9b01eedf15a7
- SHA512
  
  6ceaa2e3551fca85c4a512b38358b1be14a0e2d4321288d49ce786b7e358be0836242f53a252bf3e64c8b4843d1b920a305db0e4f2b9fb06b025a6e9cfc49ab4
- SSDEEP
  
  768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRszDr6KAWv:79mqyNhQMOtEvwDpjBxe8TpXRSDeK7v
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2