0abd4177bb5ce96feddffea4a7e56aaedd66e8d6ee3799b16c08a2771c4e4ccb | Triage

Sharing

General

Target

2024-11-20_d0ec63aa51a5c14a8a9484ecc5c6a33d_cryptolocker
Size

72KB
Sample

241120-d6cbaszlht
MD5

d0ec63aa51a5c14a8a9484ecc5c6a33d
SHA1

736b460eef2162994e9cd8513e89e8ff80325fd5
SHA256

0abd4177bb5ce96feddffea4a7e56aaedd66e8d6ee3799b16c08a2771c4e4ccb
SHA512

a7a21656cde5534e3d591e46daf3ab121fecbb6f135c56ab8c14b5d93c47ba30ce6b741edfe8059034ee1297e8e1481f83e4ce95390e39283dab890faed51d41
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO5u:DW60sllyWOtEvwDpjwF85z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_d0ec63aa51a5c14a8a9484ecc5c6a33d_cryptolocker
- Size
  
  72KB
- MD5
  
  d0ec63aa51a5c14a8a9484ecc5c6a33d
- SHA1
  
  736b460eef2162994e9cd8513e89e8ff80325fd5
- SHA256
  
  0abd4177bb5ce96feddffea4a7e56aaedd66e8d6ee3799b16c08a2771c4e4ccb
- SHA512
  
  a7a21656cde5534e3d591e46daf3ab121fecbb6f135c56ab8c14b5d93c47ba30ce6b741edfe8059034ee1297e8e1481f83e4ce95390e39283dab890faed51d41
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO5u:DW60sllyWOtEvwDpjwF85z
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2