47013e44aa2d04abbbc26440d1da4bb8fbdf4ec78b5a87a6ee2e6e70f32a734c | Triage

Sharing

General

Target

2024-11-20_56d08ce1975eedfdae1e7fd1110155ae_cryptolocker
Size

62KB
Sample

241120-f3q2dswqeq
MD5

56d08ce1975eedfdae1e7fd1110155ae
SHA1

d4d20fd17398950457c90c5b1a5436a17c7d31fa
SHA256

47013e44aa2d04abbbc26440d1da4bb8fbdf4ec78b5a87a6ee2e6e70f32a734c
SHA512

dc34ad0454cd10fb81feb55c0e2df59fcbe0d578ab88a06333c72acdc9c6f10be890d5fc2645039ffd5768668f9d6aa29aa71764d768a78acb34526749d20376
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36uc0:ZVxkGOtEvwDpjcaX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_56d08ce1975eedfdae1e7fd1110155ae_cryptolocker
- Size
  
  62KB
- MD5
  
  56d08ce1975eedfdae1e7fd1110155ae
- SHA1
  
  d4d20fd17398950457c90c5b1a5436a17c7d31fa
- SHA256
  
  47013e44aa2d04abbbc26440d1da4bb8fbdf4ec78b5a87a6ee2e6e70f32a734c
- SHA512
  
  dc34ad0454cd10fb81feb55c0e2df59fcbe0d578ab88a06333c72acdc9c6f10be890d5fc2645039ffd5768668f9d6aa29aa71764d768a78acb34526749d20376
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36uc0:ZVxkGOtEvwDpjcaX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2