305dfba9f2f230444ed363e61d64226f86d797c7d78d3a609387f25447527a29 | Triage

Sharing

General

Target

2024-10-31_816cb9d995a962b11c9cc873cc5c643a_cryptolocker
Size

48KB
Sample

241031-kcr8zsverp
MD5

816cb9d995a962b11c9cc873cc5c643a
SHA1

3e86321c2cce8674e83b126aae75077f39d3f730
SHA256

305dfba9f2f230444ed363e61d64226f86d797c7d78d3a609387f25447527a29
SHA512

c893b71b726500f6031fe2d8c2d09fca45df848c6ac6036321bd1ea43af3e7eda0f5ad62108d498005544e5e9ef37f1ff3c40effa49001870895af131e065804
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrPv:y6QFElP6n+gMQMOtEvwDpjbizbR9XwzL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_816cb9d995a962b11c9cc873cc5c643a_cryptolocker
- Size
  
  48KB
- MD5
  
  816cb9d995a962b11c9cc873cc5c643a
- SHA1
  
  3e86321c2cce8674e83b126aae75077f39d3f730
- SHA256
  
  305dfba9f2f230444ed363e61d64226f86d797c7d78d3a609387f25447527a29
- SHA512
  
  c893b71b726500f6031fe2d8c2d09fca45df848c6ac6036321bd1ea43af3e7eda0f5ad62108d498005544e5e9ef37f1ff3c40effa49001870895af131e065804
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrPv:y6QFElP6n+gMQMOtEvwDpjbizbR9XwzL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2