ff0cb8be11506ea1b4ed497eec2be255d49fc9484c9c4255cf4b3f826b86f1ea | Triage

Sharing

General

Target

2024-10-31_12ab53fa439d221d586d8601f4e29484_cryptolocker
Size

48KB
Sample

241031-j9r4tasqev
MD5

12ab53fa439d221d586d8601f4e29484
SHA1

a1f481a66f6f8cd57b8e63ad6bab57d08c8d0b98
SHA256

ff0cb8be11506ea1b4ed497eec2be255d49fc9484c9c4255cf4b3f826b86f1ea
SHA512

dd681281d14a78097ecb19dbca0db59eb4d52a940f3311660b31d0bf1af501a75e3063d1b0d6aa078bb41b5d9ed336e5a927aaf36f68a470cd3d7259ccb4520b
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXD:V6QFElP6n+gMQMOtEvwDpjyaHaXrD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_12ab53fa439d221d586d8601f4e29484_cryptolocker
- Size
  
  48KB
- MD5
  
  12ab53fa439d221d586d8601f4e29484
- SHA1
  
  a1f481a66f6f8cd57b8e63ad6bab57d08c8d0b98
- SHA256
  
  ff0cb8be11506ea1b4ed497eec2be255d49fc9484c9c4255cf4b3f826b86f1ea
- SHA512
  
  dd681281d14a78097ecb19dbca0db59eb4d52a940f3311660b31d0bf1af501a75e3063d1b0d6aa078bb41b5d9ed336e5a927aaf36f68a470cd3d7259ccb4520b
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXD:V6QFElP6n+gMQMOtEvwDpjyaHaXrD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2