64028ad6c506434dbcec3f644dbb89ba750cc8e6e347f582b65fbadc4ea6db5c | Triage

Sharing

General

Target

2024-11-02_af2b5de9ecfbc7865155de86d9dc9b38_cryptolocker
Size

76KB
Sample

241102-g11cqa1pbm
MD5

af2b5de9ecfbc7865155de86d9dc9b38
SHA1

8ab6345eb88220dfcfc2a4d2fad2de08379e2b9d
SHA256

64028ad6c506434dbcec3f644dbb89ba750cc8e6e347f582b65fbadc4ea6db5c
SHA512

9c347fddf48e96b5477c782e38c7adb60088a4038107a2b96e21942b3419b0a1284bb498068e5870f93b9cc0e922e83b7f0a6faba0f71acaa181f1b5e9823c69
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUPGZ:xj+VGMOtEvwDpjubwQEI8UPGZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-02_af2b5de9ecfbc7865155de86d9dc9b38_cryptolocker
- Size
  
  76KB
- MD5
  
  af2b5de9ecfbc7865155de86d9dc9b38
- SHA1
  
  8ab6345eb88220dfcfc2a4d2fad2de08379e2b9d
- SHA256
  
  64028ad6c506434dbcec3f644dbb89ba750cc8e6e347f582b65fbadc4ea6db5c
- SHA512
  
  9c347fddf48e96b5477c782e38c7adb60088a4038107a2b96e21942b3419b0a1284bb498068e5870f93b9cc0e922e83b7f0a6faba0f71acaa181f1b5e9823c69
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUPGZ:xj+VGMOtEvwDpjubwQEI8UPGZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2