f83c85e2fbd2039f4b365a5ca449c3b804fd427b31b3865cb89319eaa3913f20 | Triage

Sharing

General

Target

2024-10-31_45e31ed6b98e640df386242a89a09e29_cryptolocker
Size

47KB
Sample

241031-kaxqpavcnf
MD5

45e31ed6b98e640df386242a89a09e29
SHA1

ba2b2bc1e8cfd3c710b28f2ba65265c41d316286
SHA256

f83c85e2fbd2039f4b365a5ca449c3b804fd427b31b3865cb89319eaa3913f20
SHA512

0316e8c16922f0f854db570f01271209c315953fb0ba10307ff922fb5be42456c8a825db3dec665124c2a609bf08237c7d096add85419cc40b541a6415e443c2
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJlN:6j+1NMOtEvwDpjrRraJP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_45e31ed6b98e640df386242a89a09e29_cryptolocker
- Size
  
  47KB
- MD5
  
  45e31ed6b98e640df386242a89a09e29
- SHA1
  
  ba2b2bc1e8cfd3c710b28f2ba65265c41d316286
- SHA256
  
  f83c85e2fbd2039f4b365a5ca449c3b804fd427b31b3865cb89319eaa3913f20
- SHA512
  
  0316e8c16922f0f854db570f01271209c315953fb0ba10307ff922fb5be42456c8a825db3dec665124c2a609bf08237c7d096add85419cc40b541a6415e443c2
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJlN:6j+1NMOtEvwDpjrRraJP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2