a4abe13faae5eeff9be07efd7f91771a1f6fae7c22cf955cd1333fd4849a3447 | Triage

Sharing

General

Target

2024-11-20_10177985ce018afc53d98a0d20179213_cryptolocker
Size

55KB
Sample

241120-f2r73a1gkc
MD5

10177985ce018afc53d98a0d20179213
SHA1

861c33724090cce547497d6269802e1cdd2d7374
SHA256

a4abe13faae5eeff9be07efd7f91771a1f6fae7c22cf955cd1333fd4849a3447
SHA512

8ffb1beae30de4c98c98d76bef5f7d6de0e4c1bb1f5b275805863869547bf9f697197efba3b253b946622ab3495b734c1f4abe7132d6f40abd87fd0cca3f24bb
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIz:X6QFElP6n+gJBMOtEvwDpjBtExml4

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_10177985ce018afc53d98a0d20179213_cryptolocker
- Size
  
  55KB
- MD5
  
  10177985ce018afc53d98a0d20179213
- SHA1
  
  861c33724090cce547497d6269802e1cdd2d7374
- SHA256
  
  a4abe13faae5eeff9be07efd7f91771a1f6fae7c22cf955cd1333fd4849a3447
- SHA512
  
  8ffb1beae30de4c98c98d76bef5f7d6de0e4c1bb1f5b275805863869547bf9f697197efba3b253b946622ab3495b734c1f4abe7132d6f40abd87fd0cca3f24bb
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIz:X6QFElP6n+gJBMOtEvwDpjBtExml4
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2