4101f96eb8e3fb7715aba6d32c55f8143573a163bf62a39809fad6ca0eb63d29 | Triage

Sharing

General

Target

2024-10-31_feecaca4d799c232bb17dc9af5488e0c_cryptolocker
Size

38KB
Sample

241031-j8n1rsvcja
MD5

feecaca4d799c232bb17dc9af5488e0c
SHA1

1667d86846286082f52cd56c36255043ac8779ef
SHA256

4101f96eb8e3fb7715aba6d32c55f8143573a163bf62a39809fad6ca0eb63d29
SHA512

2ace1deae09132dc3675d7776ed2c17db796ba4a51b1271c5c6fe3f4e55b214d1f4a7cec29bb22d5a4e93425b0c91400ed0d341f00e1478b68783e216b22b082
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIPqR:btB9g/WItCSsAGjX7e9N0hunrk3qR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_feecaca4d799c232bb17dc9af5488e0c_cryptolocker
- Size
  
  38KB
- MD5
  
  feecaca4d799c232bb17dc9af5488e0c
- SHA1
  
  1667d86846286082f52cd56c36255043ac8779ef
- SHA256
  
  4101f96eb8e3fb7715aba6d32c55f8143573a163bf62a39809fad6ca0eb63d29
- SHA512
  
  2ace1deae09132dc3675d7776ed2c17db796ba4a51b1271c5c6fe3f4e55b214d1f4a7cec29bb22d5a4e93425b0c91400ed0d341f00e1478b68783e216b22b082
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIPqR:btB9g/WItCSsAGjX7e9N0hunrk3qR
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2