e18d71d70bb6cbe4c2c5176b26e17660805fd42cb3a0dcc6e9510bbc159a8ec8 | Triage

Sharing

General

Target

2024-11-20_24362fe6c3e23d1d1298b14dcaa3c20a_cryptolocker
Size

74KB
Sample

241120-dxysyazare
MD5

24362fe6c3e23d1d1298b14dcaa3c20a
SHA1

90cfc218ae6708dcfc43aa9a0505f027417f2307
SHA256

e18d71d70bb6cbe4c2c5176b26e17660805fd42cb3a0dcc6e9510bbc159a8ec8
SHA512

7470dd4676a126e0d405e04a29c267cd1aab3e47b5a4fb3df833bbf0583833a9cb63779ce9d558b66bd09116f9e9de95891ecaab8aecd128abe87e6e649c7edd
SSDEEP

768:9UQz7yVEhs9+4T/1bytOOtEvwDpjLXOQ69zbjlAAX5e9zt:9Uj+AIMOtEvwDpjLizbR9Xwzt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_24362fe6c3e23d1d1298b14dcaa3c20a_cryptolocker
- Size
  
  74KB
- MD5
  
  24362fe6c3e23d1d1298b14dcaa3c20a
- SHA1
  
  90cfc218ae6708dcfc43aa9a0505f027417f2307
- SHA256
  
  e18d71d70bb6cbe4c2c5176b26e17660805fd42cb3a0dcc6e9510bbc159a8ec8
- SHA512
  
  7470dd4676a126e0d405e04a29c267cd1aab3e47b5a4fb3df833bbf0583833a9cb63779ce9d558b66bd09116f9e9de95891ecaab8aecd128abe87e6e649c7edd
- SSDEEP
  
  768:9UQz7yVEhs9+4T/1bytOOtEvwDpjLXOQ69zbjlAAX5e9zt:9Uj+AIMOtEvwDpjLizbR9Xwzt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2