f4e3f7e79067fdf0937c76ef833809a1d40e9b0f5e291a6a7e16390b685ce382 | Triage

Sharing

General

Target

2024-10-18_10ecf04e374f0cb303acbd67aebea9e1_cryptolocker
Size

44KB
Sample

241018-lsz47szeqe
MD5

10ecf04e374f0cb303acbd67aebea9e1
SHA1

fbfb3ea2faee56249300e1d3be912813dd8cd506
SHA256

f4e3f7e79067fdf0937c76ef833809a1d40e9b0f5e291a6a7e16390b685ce382
SHA512

d025a61e37128e502a5f598fa5336776f4dbb2214d7977cb475973fb68a7db45b2d6345fe04176fd293cf9e6b71a8a4032ebe959987fb759924d589f1fccf1d2
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjry:bCDOw9aMDooc+vAqj2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_10ecf04e374f0cb303acbd67aebea9e1_cryptolocker
- Size
  
  44KB
- MD5
  
  10ecf04e374f0cb303acbd67aebea9e1
- SHA1
  
  fbfb3ea2faee56249300e1d3be912813dd8cd506
- SHA256
  
  f4e3f7e79067fdf0937c76ef833809a1d40e9b0f5e291a6a7e16390b685ce382
- SHA512
  
  d025a61e37128e502a5f598fa5336776f4dbb2214d7977cb475973fb68a7db45b2d6345fe04176fd293cf9e6b71a8a4032ebe959987fb759924d589f1fccf1d2
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjry:bCDOw9aMDooc+vAqj2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2