b8dd6e857ec45b7c565fda75d22b4007489f974066bc83ef0d84e3cfecb93243 | Triage

Sharing

General

Target

2024-10-31_965875f7a734c5b036ab12b9e54a676f_cryptolocker
Size

48KB
Sample

241031-kdb86avfjr
MD5

965875f7a734c5b036ab12b9e54a676f
SHA1

1cc5007f32e66aca623d680ffbfd63d60e6204d5
SHA256

b8dd6e857ec45b7c565fda75d22b4007489f974066bc83ef0d84e3cfecb93243
SHA512

d04990e89983d893b2bb41766f49df02214dbf528d863b553d592bdc0c860e0b1b0cdd667b694fcaa1170dfea4bc5ea888cce32d0123311a6b715c0daa811228
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAl:P6QFElP6k+MRQMOtEvwDpjBQpVX8Al

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_965875f7a734c5b036ab12b9e54a676f_cryptolocker
- Size
  
  48KB
- MD5
  
  965875f7a734c5b036ab12b9e54a676f
- SHA1
  
  1cc5007f32e66aca623d680ffbfd63d60e6204d5
- SHA256
  
  b8dd6e857ec45b7c565fda75d22b4007489f974066bc83ef0d84e3cfecb93243
- SHA512
  
  d04990e89983d893b2bb41766f49df02214dbf528d863b553d592bdc0c860e0b1b0cdd667b694fcaa1170dfea4bc5ea888cce32d0123311a6b715c0daa811228
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAl:P6QFElP6k+MRQMOtEvwDpjBQpVX8Al
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2