7050e68ab493d078f72d9e67f5770af0899b801e235833cd25706da3348554bb | Triage

Sharing

General

Target

2024-10-31_f5b89569498a4681066f705bfa0f0656_cryptolocker
Size

80KB
Sample

241031-j2czxsvbje
MD5

f5b89569498a4681066f705bfa0f0656
SHA1

dfb29a2e10bc2f7242579a4ce1c8a9939942601e
SHA256

7050e68ab493d078f72d9e67f5770af0899b801e235833cd25706da3348554bb
SHA512

f646d9c9f91be3a5cff9a0211419d1c1ef1eb47d15db2f1873238e8c8eb0568c9da524326c8e910054bccaf426f4f5f2148c698978602cf9b222128026f7804f
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNByW:vCjsIOtEvwDpj5H9YvQd27

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_f5b89569498a4681066f705bfa0f0656_cryptolocker
- Size
  
  80KB
- MD5
  
  f5b89569498a4681066f705bfa0f0656
- SHA1
  
  dfb29a2e10bc2f7242579a4ce1c8a9939942601e
- SHA256
  
  7050e68ab493d078f72d9e67f5770af0899b801e235833cd25706da3348554bb
- SHA512
  
  f646d9c9f91be3a5cff9a0211419d1c1ef1eb47d15db2f1873238e8c8eb0568c9da524326c8e910054bccaf426f4f5f2148c698978602cf9b222128026f7804f
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNByW:vCjsIOtEvwDpj5H9YvQd27
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2