66318912cbdcd2492064cffa55c9884e1c10acc3b3c44da83566fda7289f0272 | Triage

Sharing

General

Target

2024-11-20_8ce9c97c935030163017fb264dd62b16_cryptolocker
Size

36KB
Sample

241120-f4thxa1rfy
MD5

8ce9c97c935030163017fb264dd62b16
SHA1

500596fcea8c9c0610e02777ce6e146e0f18d44d
SHA256

66318912cbdcd2492064cffa55c9884e1c10acc3b3c44da83566fda7289f0272
SHA512

2eb2e2d6135745ab1d8bb7bf798b363708fda255c8038681b3c2b6b2b58b047e09f3a8f8ba15baba7ee61348cfb8068ebd35c5b09d3db2f0d4355047a082ed1e
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorwI62tH/PN/uTIRpFKQU:b7o/2n1TCraU6GD1a4Xcn62tH/1/LpFm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_8ce9c97c935030163017fb264dd62b16_cryptolocker
- Size
  
  36KB
- MD5
  
  8ce9c97c935030163017fb264dd62b16
- SHA1
  
  500596fcea8c9c0610e02777ce6e146e0f18d44d
- SHA256
  
  66318912cbdcd2492064cffa55c9884e1c10acc3b3c44da83566fda7289f0272
- SHA512
  
  2eb2e2d6135745ab1d8bb7bf798b363708fda255c8038681b3c2b6b2b58b047e09f3a8f8ba15baba7ee61348cfb8068ebd35c5b09d3db2f0d4355047a082ed1e
- SSDEEP
  
  384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorwI62tH/PN/uTIRpFKQU:b7o/2n1TCraU6GD1a4Xcn62tH/1/LpFm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2