0adddd747ae45d59217dd19f7a56a69ad8c1d5555f936ae8c5a0e7db58f2614d | Triage

Sharing

General

Target

2024-10-31_6046be2ec47f7c0453a3425a347fb1a4_cryptolocker
Size

47KB
Sample

241031-kb2q2asraw
MD5

6046be2ec47f7c0453a3425a347fb1a4
SHA1

80dcc560a4d36f507a296ba845a36b59fdf66e6f
SHA256

0adddd747ae45d59217dd19f7a56a69ad8c1d5555f936ae8c5a0e7db58f2614d
SHA512

171d1a1acbaf8050a29e3b47831fad4814943b97caa4e69259e531345f8ce7f6ea625bd6c140296dbb7ab3f15876801e155287882f2e92c91af33d7c31dbe3ac
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJl4:6j+1NMOtEvwDpjrRraJ2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_6046be2ec47f7c0453a3425a347fb1a4_cryptolocker
- Size
  
  47KB
- MD5
  
  6046be2ec47f7c0453a3425a347fb1a4
- SHA1
  
  80dcc560a4d36f507a296ba845a36b59fdf66e6f
- SHA256
  
  0adddd747ae45d59217dd19f7a56a69ad8c1d5555f936ae8c5a0e7db58f2614d
- SHA512
  
  171d1a1acbaf8050a29e3b47831fad4814943b97caa4e69259e531345f8ce7f6ea625bd6c140296dbb7ab3f15876801e155287882f2e92c91af33d7c31dbe3ac
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJl4:6j+1NMOtEvwDpjrRraJ2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2