1a8e2780221f0577b3b5637ed81b9c742d0dd02adefde5a4cc9c35de1368d35c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_c2f2213099c09b2b978649ffeadf3e10_cryptolocker
Size

42KB
Sample

241018-fa99kaxgkc
MD5

c2f2213099c09b2b978649ffeadf3e10
SHA1

278828b095214302200bb6ed9d5f765de8066b2e
SHA256

1a8e2780221f0577b3b5637ed81b9c742d0dd02adefde5a4cc9c35de1368d35c
SHA512

41a8a29dec8e811ed112ad12450f138787ba35560b882cf3e97f9c812a6c05585e1e25372b74332d44872be975fce240f61b4d47e0318db9fcbf5631ceff1eb8
SSDEEP

768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpI:79mqyNhQMOtEvwDpjBzckB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_c2f2213099c09b2b978649ffeadf3e10_cryptolocker
- Size
  
  42KB
- MD5
  
  c2f2213099c09b2b978649ffeadf3e10
- SHA1
  
  278828b095214302200bb6ed9d5f765de8066b2e
- SHA256
  
  1a8e2780221f0577b3b5637ed81b9c742d0dd02adefde5a4cc9c35de1368d35c
- SHA512
  
  41a8a29dec8e811ed112ad12450f138787ba35560b882cf3e97f9c812a6c05585e1e25372b74332d44872be975fce240f61b4d47e0318db9fcbf5631ceff1eb8
- SSDEEP
  
  768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpI:79mqyNhQMOtEvwDpjBzckB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2