596fced10fcedf7daf5c0b6a19a97f86999b4a160a1ac582988b1bddf32db675 | Triage

Sharing

General

Target

2024-10-31_f8aa9c6009cb97ee470acea3cada67c4_cryptolocker
Size

68KB
Sample

241031-j6kkkavbpc
MD5

f8aa9c6009cb97ee470acea3cada67c4
SHA1

b65f9967b8cd01fca0f092c1c9efbf1d70bca6cd
SHA256

596fced10fcedf7daf5c0b6a19a97f86999b4a160a1ac582988b1bddf32db675
SHA512

6b0367c6ae72349306e9776bdfe40f5ff4e28ed1f43e53dfc164738472164f59c73109efbe7f84956e1e2c2321488e43e47fa115ddf2b01a83266df00036ec1d
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUR:DW60sllyWOtEvwDpjwF85/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_f8aa9c6009cb97ee470acea3cada67c4_cryptolocker
- Size
  
  68KB
- MD5
  
  f8aa9c6009cb97ee470acea3cada67c4
- SHA1
  
  b65f9967b8cd01fca0f092c1c9efbf1d70bca6cd
- SHA256
  
  596fced10fcedf7daf5c0b6a19a97f86999b4a160a1ac582988b1bddf32db675
- SHA512
  
  6b0367c6ae72349306e9776bdfe40f5ff4e28ed1f43e53dfc164738472164f59c73109efbe7f84956e1e2c2321488e43e47fa115ddf2b01a83266df00036ec1d
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUR:DW60sllyWOtEvwDpjwF85/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2