b5243d6f527c8057fbdbfc5b439152cd09b7ca95a173967802319c03969417d1 | Triage

Sharing

General

Target

2024-10-31_1f587ae8fd252849354f70b000a56558_cryptolocker
Size

54KB
Sample

241031-j9xdjavclb
MD5

1f587ae8fd252849354f70b000a56558
SHA1

51aca06dd56bc2b77958d0cb030dd75f9eba0a8a
SHA256

b5243d6f527c8057fbdbfc5b439152cd09b7ca95a173967802319c03969417d1
SHA512

cbdb0d21fafd3b9aa14706412bae1e950e0644fbe38f124a1aa1f641d91ca27fd33aaea1fd37deaf584e5725e011f838cab8eae8fe75c11d143abd66c2fa9087
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTG:X6QFElP6n+gJBMOtEvwDpjBtExmly

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_1f587ae8fd252849354f70b000a56558_cryptolocker
- Size
  
  54KB
- MD5
  
  1f587ae8fd252849354f70b000a56558
- SHA1
  
  51aca06dd56bc2b77958d0cb030dd75f9eba0a8a
- SHA256
  
  b5243d6f527c8057fbdbfc5b439152cd09b7ca95a173967802319c03969417d1
- SHA512
  
  cbdb0d21fafd3b9aa14706412bae1e950e0644fbe38f124a1aa1f641d91ca27fd33aaea1fd37deaf584e5725e011f838cab8eae8fe75c11d143abd66c2fa9087
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTG:X6QFElP6n+gJBMOtEvwDpjBtExmly
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2