4090a1daba1df8e29060a680ca04b50d5e9e9a955cd1274712e47cd27d83f20e | Triage

Sharing

General

Target

2024-11-01_9cfd3c257622e0bb29c396ba75ee8e6d_cryptolocker
Size

61KB
Sample

241101-wthlnavpal
MD5

9cfd3c257622e0bb29c396ba75ee8e6d
SHA1

309b1b25fe085f62ccd8ad0ee197c63be719f4b6
SHA256

4090a1daba1df8e29060a680ca04b50d5e9e9a955cd1274712e47cd27d83f20e
SHA512

b49289fa3a4da8446e345ac1775ddc142a5b586a81b570f5e793951875b712e911386f91e99763ae115cbb950cb8bb29a593ffb3c9eb5ffa2a7673a6c1242499
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29d:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-01_9cfd3c257622e0bb29c396ba75ee8e6d_cryptolocker
- Size
  
  61KB
- MD5
  
  9cfd3c257622e0bb29c396ba75ee8e6d
- SHA1
  
  309b1b25fe085f62ccd8ad0ee197c63be719f4b6
- SHA256
  
  4090a1daba1df8e29060a680ca04b50d5e9e9a955cd1274712e47cd27d83f20e
- SHA512
  
  b49289fa3a4da8446e345ac1775ddc142a5b586a81b570f5e793951875b712e911386f91e99763ae115cbb950cb8bb29a593ffb3c9eb5ffa2a7673a6c1242499
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29d:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2