415c04516338270cfe272af735c29950ee9465b5fe6df40b8ed6a0bed645a77d | Triage

Sharing

General

Target

2024-11-20_4627e6fbad35cbbcabc3be274dc33fe1_cryptolocker
Size

62KB
Sample

241120-f3encssfkr
MD5

4627e6fbad35cbbcabc3be274dc33fe1
SHA1

d5e20fc6286012b782f6ba90235e0a449b44533b
SHA256

415c04516338270cfe272af735c29950ee9465b5fe6df40b8ed6a0bed645a77d
SHA512

72ffad0d15347a69b818942e05e2bac2ed7e1f7054911db59cb744cef6b493fde628ded107a95a1d93eebeb6d271494d9a12a29cc29d349c7ca74cb26d4e3efb
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36ucg:ZVxkGOtEvwDpjcaj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_4627e6fbad35cbbcabc3be274dc33fe1_cryptolocker
- Size
  
  62KB
- MD5
  
  4627e6fbad35cbbcabc3be274dc33fe1
- SHA1
  
  d5e20fc6286012b782f6ba90235e0a449b44533b
- SHA256
  
  415c04516338270cfe272af735c29950ee9465b5fe6df40b8ed6a0bed645a77d
- SHA512
  
  72ffad0d15347a69b818942e05e2bac2ed7e1f7054911db59cb744cef6b493fde628ded107a95a1d93eebeb6d271494d9a12a29cc29d349c7ca74cb26d4e3efb
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36ucg:ZVxkGOtEvwDpjcaj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2