64bf0352a9de92423c6e3f24e886e86365ea3330ec118b2ffe5a8b8f0128203b | Triage

Sharing

General

Target

2024-10-31_f17a03a3009035502e26a03827cfd1b6_cryptolocker
Size

28KB
Sample

241031-j4jv9avdpj
MD5

f17a03a3009035502e26a03827cfd1b6
SHA1

b767ec4f1b7503fb0f7b25d29543c2327d645b1d
SHA256

64bf0352a9de92423c6e3f24e886e86365ea3330ec118b2ffe5a8b8f0128203b
SHA512

c5a54de964381f8b889869172a48a8b4abba1a5ebafb13a8e021c5160b969c88f8af5b6bca9537e0311778c02baecfe0a4389bed7cf624049a35c21647cb7ca1
SSDEEP

768:jOb2gOo0mw18ae8MrQRN7DctOOtEvwDpjQ:jKUog898rYMOtEvwDpjQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_f17a03a3009035502e26a03827cfd1b6_cryptolocker
- Size
  
  28KB
- MD5
  
  f17a03a3009035502e26a03827cfd1b6
- SHA1
  
  b767ec4f1b7503fb0f7b25d29543c2327d645b1d
- SHA256
  
  64bf0352a9de92423c6e3f24e886e86365ea3330ec118b2ffe5a8b8f0128203b
- SHA512
  
  c5a54de964381f8b889869172a48a8b4abba1a5ebafb13a8e021c5160b969c88f8af5b6bca9537e0311778c02baecfe0a4389bed7cf624049a35c21647cb7ca1
- SSDEEP
  
  768:jOb2gOo0mw18ae8MrQRN7DctOOtEvwDpjQ:jKUog898rYMOtEvwDpjQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2