6731f2bb1191edb5f47d3615cced03a3f001955cbd5952b64b7e7dc47ccaa466 | Triage

Sharing

General

Target

2024-10-31_64c23a4cafc487ca58c4db7381c66320_cryptolocker
Size

43KB
Sample

241031-cb8kksxalh
MD5

64c23a4cafc487ca58c4db7381c66320
SHA1

4a0c4748f9b84aa4b539bc67acbd260038020606
SHA256

6731f2bb1191edb5f47d3615cced03a3f001955cbd5952b64b7e7dc47ccaa466
SHA512

320593f82ff8884f7fc50a6ef79ab1079964e568e8d1403c07a89d4a18ee25620e827cee503b98e5a2d42fbc0bf376d4e6b53e56ad95d1ad81eff50243a7b135
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3V:V6QFElP6n+gMQMOtEvwDpjyaHaXD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_64c23a4cafc487ca58c4db7381c66320_cryptolocker
- Size
  
  43KB
- MD5
  
  64c23a4cafc487ca58c4db7381c66320
- SHA1
  
  4a0c4748f9b84aa4b539bc67acbd260038020606
- SHA256
  
  6731f2bb1191edb5f47d3615cced03a3f001955cbd5952b64b7e7dc47ccaa466
- SHA512
  
  320593f82ff8884f7fc50a6ef79ab1079964e568e8d1403c07a89d4a18ee25620e827cee503b98e5a2d42fbc0bf376d4e6b53e56ad95d1ad81eff50243a7b135
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3V:V6QFElP6n+gMQMOtEvwDpjyaHaXD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2