514d71a06b5c074eb07af8e04e786c65438d1ad98adb6e63c6a442198c171a3f | Triage

Sharing

General

Target

2024-10-31_25dca2f755b8491e8c0252bfc0c158e8_cryptolocker
Size

47KB
Sample

241031-j99nvswmaq
MD5

25dca2f755b8491e8c0252bfc0c158e8
SHA1

331e39301f12f37adc7f5e7f525e6903c69e5133
SHA256

514d71a06b5c074eb07af8e04e786c65438d1ad98adb6e63c6a442198c171a3f
SHA512

b3187aab129e5524b8dfc6b5285d0ad2cddb5219a3fe652a7cd5a2f51646c7c3346d4e92f0d54dff37997782e61683eafabc1db94cbb74d47734fecd128132a0
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUknqs+P:bm74zYcgT/EkM0ryfjdnqs8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_25dca2f755b8491e8c0252bfc0c158e8_cryptolocker
- Size
  
  47KB
- MD5
  
  25dca2f755b8491e8c0252bfc0c158e8
- SHA1
  
  331e39301f12f37adc7f5e7f525e6903c69e5133
- SHA256
  
  514d71a06b5c074eb07af8e04e786c65438d1ad98adb6e63c6a442198c171a3f
- SHA512
  
  b3187aab129e5524b8dfc6b5285d0ad2cddb5219a3fe652a7cd5a2f51646c7c3346d4e92f0d54dff37997782e61683eafabc1db94cbb74d47734fecd128132a0
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUknqs+P:bm74zYcgT/EkM0ryfjdnqs8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2