a5fdb8857ba2d3b6d88873ac688ae979c092a12a957462ce7289c34e1d80cf3a | Triage

Sharing

General

Target

2024-11-20_825cdbda28877c3fa81c4b806f41c1c7_cryptolocker
Size

53KB
Sample

241120-d3grlszlct
MD5

825cdbda28877c3fa81c4b806f41c1c7
SHA1

cc66380b22293eae5daba73cfd13d07eecc4640e
SHA256

a5fdb8857ba2d3b6d88873ac688ae979c092a12a957462ce7289c34e1d80cf3a
SHA512

52be0527f9db975b224db0c98858fd58b0432c6e0eb2eb1a1d0091d6223c001db2926533f3cc7d3edabb40745706dc2a8ecd31726469ecf5f47309292ed63141
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFvPt:vj+jsMQMOtEvwDpj5HH1nw73KOFt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_825cdbda28877c3fa81c4b806f41c1c7_cryptolocker
- Size
  
  53KB
- MD5
  
  825cdbda28877c3fa81c4b806f41c1c7
- SHA1
  
  cc66380b22293eae5daba73cfd13d07eecc4640e
- SHA256
  
  a5fdb8857ba2d3b6d88873ac688ae979c092a12a957462ce7289c34e1d80cf3a
- SHA512
  
  52be0527f9db975b224db0c98858fd58b0432c6e0eb2eb1a1d0091d6223c001db2926533f3cc7d3edabb40745706dc2a8ecd31726469ecf5f47309292ed63141
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFvPt:vj+jsMQMOtEvwDpj5HH1nw73KOFt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2