1ccd1882763d450aacd43a6d57b96a8bad8ea442af63a76c9543b14dc25ac8a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_b4553918c8ad11c02d4eeab207bee4d6_cryptolocker
Size

76KB
Sample

241018-ksggesxglb
MD5

b4553918c8ad11c02d4eeab207bee4d6
SHA1

7231b66c62119e003c6801ff26e8e2d32c0cc506
SHA256

1ccd1882763d450aacd43a6d57b96a8bad8ea442af63a76c9543b14dc25ac8a3
SHA512

20acc1e47517b56231bb54cf9db7ddcee348f8cda13e3e1ee2e93c40b9169bd1506360e6152b0be1f8ff8436aee7a141f70ec6f026bcf359da3732ce456d95a2
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWaC:vCjsIOtEvwDpj5H9YvQd2m

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_b4553918c8ad11c02d4eeab207bee4d6_cryptolocker
- Size
  
  76KB
- MD5
  
  b4553918c8ad11c02d4eeab207bee4d6
- SHA1
  
  7231b66c62119e003c6801ff26e8e2d32c0cc506
- SHA256
  
  1ccd1882763d450aacd43a6d57b96a8bad8ea442af63a76c9543b14dc25ac8a3
- SHA512
  
  20acc1e47517b56231bb54cf9db7ddcee348f8cda13e3e1ee2e93c40b9169bd1506360e6152b0be1f8ff8436aee7a141f70ec6f026bcf359da3732ce456d95a2
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWaC:vCjsIOtEvwDpj5H9YvQd2m
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2