d4757a830e10446cf78d8ae5431cedfa55d507fa3f739fe124d5f66a801750ba | Triage

Sharing

General

Target

2024-11-20_5bdf260c4c018c669c8711541d284a3b_cryptolocker
Size

69KB
Sample

241120-f3t32ssfln
MD5

5bdf260c4c018c669c8711541d284a3b
SHA1

40362c2539bd6f2b29462d1b3469895403f3e21a
SHA256

d4757a830e10446cf78d8ae5431cedfa55d507fa3f739fe124d5f66a801750ba
SHA512

6c3147de5195ab96eec8b4a5c7a67d68cd900e4f3e00ae0668092c8749ccb3aa1675561ad0f126309da77b1e78847220c2681311f8f802694d97f7fd598c1b06
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLE3:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7P

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_5bdf260c4c018c669c8711541d284a3b_cryptolocker
- Size
  
  69KB
- MD5
  
  5bdf260c4c018c669c8711541d284a3b
- SHA1
  
  40362c2539bd6f2b29462d1b3469895403f3e21a
- SHA256
  
  d4757a830e10446cf78d8ae5431cedfa55d507fa3f739fe124d5f66a801750ba
- SHA512
  
  6c3147de5195ab96eec8b4a5c7a67d68cd900e4f3e00ae0668092c8749ccb3aa1675561ad0f126309da77b1e78847220c2681311f8f802694d97f7fd598c1b06
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLE3:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7P
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2