a863c7118698e7236ea8a23c245b946885b6a90fe8987c9d8ee92d53e8d14589 | Triage

Sharing

General

Target

2024-10-31_edebc0db3161b6115224d14e797aa997_cryptolocker
Size

44KB
Sample

241031-j3a7qaspgw
MD5

edebc0db3161b6115224d14e797aa997
SHA1

caec69750a8ec3b2028812179251b69757b1ec48
SHA256

a863c7118698e7236ea8a23c245b946885b6a90fe8987c9d8ee92d53e8d14589
SHA512

4f53ace6b755d5bbc0b52528b7b5f0b9b9e4125ccd4880e4d7a76b6a523246b371ddd4ab2d8cd6600fecb20a90b354465b994f938470e6fc21df34f2c6d835fa
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjZ1UKXJ0ToBpd:ZzFbxmLPWQMOtEvwDpjbtJ0gj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_edebc0db3161b6115224d14e797aa997_cryptolocker
- Size
  
  44KB
- MD5
  
  edebc0db3161b6115224d14e797aa997
- SHA1
  
  caec69750a8ec3b2028812179251b69757b1ec48
- SHA256
  
  a863c7118698e7236ea8a23c245b946885b6a90fe8987c9d8ee92d53e8d14589
- SHA512
  
  4f53ace6b755d5bbc0b52528b7b5f0b9b9e4125ccd4880e4d7a76b6a523246b371ddd4ab2d8cd6600fecb20a90b354465b994f938470e6fc21df34f2c6d835fa
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjZ1UKXJ0ToBpd:ZzFbxmLPWQMOtEvwDpjbtJ0gj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2