2b5e24116a2e5363bc0360948b780f9aba61939069d7fef8eee79143b0db7f84 | Triage

Sharing

General

Target

2024-11-20_5ab7507d98bcea21c8723172f468f02c_cryptolocker
Size

51KB
Sample

241120-dzpm2svkdp
MD5

5ab7507d98bcea21c8723172f468f02c
SHA1

aa401c95bfeb01671b8a7370c1a277f7051eb83c
SHA256

2b5e24116a2e5363bc0360948b780f9aba61939069d7fef8eee79143b0db7f84
SHA512

a427e46f52b24ebde47ef3bdbb0bb29100ad6288798e146c018de85b3588417a6e70b6a86072d42cc76ed73dd2410705c268570a6c7050fff5580063f8fa6f8d
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nw:vj+jsMQMOtEvwDpj5HczerLO04B7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_5ab7507d98bcea21c8723172f468f02c_cryptolocker
- Size
  
  51KB
- MD5
  
  5ab7507d98bcea21c8723172f468f02c
- SHA1
  
  aa401c95bfeb01671b8a7370c1a277f7051eb83c
- SHA256
  
  2b5e24116a2e5363bc0360948b780f9aba61939069d7fef8eee79143b0db7f84
- SHA512
  
  a427e46f52b24ebde47ef3bdbb0bb29100ad6288798e146c018de85b3588417a6e70b6a86072d42cc76ed73dd2410705c268570a6c7050fff5580063f8fa6f8d
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nw:vj+jsMQMOtEvwDpj5HczerLO04B7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2