fa3abfe685f0b1c7f88dd2cb0f319f05fa8be4699ba6af1cd1918badb6d3528e | Triage

Sharing

General

Target

2024-11-02_c5a01fd34ca5d14ee65bb7297d2aa205_cryptolocker
Size

28KB
Sample

241102-g9egls1phl
MD5

c5a01fd34ca5d14ee65bb7297d2aa205
SHA1

16d26181b4c640fb29d1ee39711dedee2ad7d140
SHA256

fa3abfe685f0b1c7f88dd2cb0f319f05fa8be4699ba6af1cd1918badb6d3528e
SHA512

9b214a558cdf26c7f905ece8668dfb2909636a4b094918b70a55e30cf587bd053c2b3b49d9ab5dcd5fb47e5df2ed21b805725a50221103179b6cebd10a8a443c
SSDEEP

768:IRFBgME4kmW6FtnKn7DI6tOOtEvwDpjYx:SgME4kJ6D0MOtEvwDpjYx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-02_c5a01fd34ca5d14ee65bb7297d2aa205_cryptolocker
- Size
  
  28KB
- MD5
  
  c5a01fd34ca5d14ee65bb7297d2aa205
- SHA1
  
  16d26181b4c640fb29d1ee39711dedee2ad7d140
- SHA256
  
  fa3abfe685f0b1c7f88dd2cb0f319f05fa8be4699ba6af1cd1918badb6d3528e
- SHA512
  
  9b214a558cdf26c7f905ece8668dfb2909636a4b094918b70a55e30cf587bd053c2b3b49d9ab5dcd5fb47e5df2ed21b805725a50221103179b6cebd10a8a443c
- SSDEEP
  
  768:IRFBgME4kmW6FtnKn7DI6tOOtEvwDpjYx:SgME4kJ6D0MOtEvwDpjYx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2