c2840215b8ca72cd4beb01f7aa223e6814cc0b65fbc16ba11de575709b74b63f | Triage

Sharing

General

Target

2024-10-18_f437a9a376941fea4d1dbd2783b59b3e_cryptolocker
Size

31KB
Sample

241018-fenalayajg
MD5

f437a9a376941fea4d1dbd2783b59b3e
SHA1

ecc3701f25de2522be76dda0401937d6b64fbbe7
SHA256

c2840215b8ca72cd4beb01f7aa223e6814cc0b65fbc16ba11de575709b74b63f
SHA512

52e5013580d3a2fffb275ebeb887ba871a97e071c34d27366cabb1a797937ca24c7f780043a66f54371b6d4696f73d86cb339f14ddb51d9cdb4a4dc8c3662b62
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R9U1gpPQZ:b7o/2n1TCraU6GD1a4Xt9R21TZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_f437a9a376941fea4d1dbd2783b59b3e_cryptolocker
- Size
  
  31KB
- MD5
  
  f437a9a376941fea4d1dbd2783b59b3e
- SHA1
  
  ecc3701f25de2522be76dda0401937d6b64fbbe7
- SHA256
  
  c2840215b8ca72cd4beb01f7aa223e6814cc0b65fbc16ba11de575709b74b63f
- SHA512
  
  52e5013580d3a2fffb275ebeb887ba871a97e071c34d27366cabb1a797937ca24c7f780043a66f54371b6d4696f73d86cb339f14ddb51d9cdb4a4dc8c3662b62
- SSDEEP
  
  384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R9U1gpPQZ:b7o/2n1TCraU6GD1a4Xt9R21TZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2