13cb3431dc7f420579ac731e99856c6a313f196a8c9b0cd53b9a7d933e23d181 | Triage

Sharing

General

Target

2024-11-20_ed55423c29554340cfebdf49d6e20df6_cryptolocker
Size

68KB
Sample

241120-e6k4wa1hrj
MD5

ed55423c29554340cfebdf49d6e20df6
SHA1

b8d38713e04327a2d6ec21851da22028e21bc65f
SHA256

13cb3431dc7f420579ac731e99856c6a313f196a8c9b0cd53b9a7d933e23d181
SHA512

d31e805f0b48adf500cb1a252aab2248c86a7ee5dd33b9e70e370ea37b28d661841314fc067c929f2b1b1e9c2b63987034aa1514e698581e50d665f5e8aa6d7f
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2Uj:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7X

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_ed55423c29554340cfebdf49d6e20df6_cryptolocker
- Size
  
  68KB
- MD5
  
  ed55423c29554340cfebdf49d6e20df6
- SHA1
  
  b8d38713e04327a2d6ec21851da22028e21bc65f
- SHA256
  
  13cb3431dc7f420579ac731e99856c6a313f196a8c9b0cd53b9a7d933e23d181
- SHA512
  
  d31e805f0b48adf500cb1a252aab2248c86a7ee5dd33b9e70e370ea37b28d661841314fc067c929f2b1b1e9c2b63987034aa1514e698581e50d665f5e8aa6d7f
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2Uj:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7X
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2