06e5e14e87b203eb0f81465d16c60abd450d8eb7b244f10434a6fd9ff30484d9 | Triage

Sharing

General

Target

2024-10-31_77cda428a0012b5f50aebfb8bc0fdd03_cryptolocker
Size

57KB
Sample

241031-kcnwkasrbs
MD5

77cda428a0012b5f50aebfb8bc0fdd03
SHA1

2424b060c8a833c73243a4e892988288ce1d3b36
SHA256

06e5e14e87b203eb0f81465d16c60abd450d8eb7b244f10434a6fd9ff30484d9
SHA512

6e584a932b87635af98cdd220399a7abbba23d8a62a5336305fd297e9b375ff2c966d41d352d0004f114c5d332e4e8c873ca2c14c0a7795103825947bcbebf45
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20HA+SF:xj+VGMOtEvwDpjubEgV20gP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_77cda428a0012b5f50aebfb8bc0fdd03_cryptolocker
- Size
  
  57KB
- MD5
  
  77cda428a0012b5f50aebfb8bc0fdd03
- SHA1
  
  2424b060c8a833c73243a4e892988288ce1d3b36
- SHA256
  
  06e5e14e87b203eb0f81465d16c60abd450d8eb7b244f10434a6fd9ff30484d9
- SHA512
  
  6e584a932b87635af98cdd220399a7abbba23d8a62a5336305fd297e9b375ff2c966d41d352d0004f114c5d332e4e8c873ca2c14c0a7795103825947bcbebf45
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20HA+SF:xj+VGMOtEvwDpjubEgV20gP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2