db89bf52f072ff3ebec09bcb7ed8c6112b935167a36a5484b96d90755a4b44d8 | Triage

Sharing

General

Target

2024-11-20_c1fa283fa97935ccdc83ebcbf7a09a8a_cryptolocker
Size

93KB
Sample

241120-f5jp4asfpm
MD5

c1fa283fa97935ccdc83ebcbf7a09a8a
SHA1

20407bb3bbb7e872efc1c818ff6d72fc53a9137e
SHA256

db89bf52f072ff3ebec09bcb7ed8c6112b935167a36a5484b96d90755a4b44d8
SHA512

600d4522656ce819aad275e97087d025c2c92fdf48c02d6d8a0bdbbaf8c3e5b17eec0d05febe2cf42f7a07a5be46c74c5b91898ea522baebd0684ca54cc5c1f8
SSDEEP

1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNC2:26a+2OtEvwDpjtz5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_c1fa283fa97935ccdc83ebcbf7a09a8a_cryptolocker
- Size
  
  93KB
- MD5
  
  c1fa283fa97935ccdc83ebcbf7a09a8a
- SHA1
  
  20407bb3bbb7e872efc1c818ff6d72fc53a9137e
- SHA256
  
  db89bf52f072ff3ebec09bcb7ed8c6112b935167a36a5484b96d90755a4b44d8
- SHA512
  
  600d4522656ce819aad275e97087d025c2c92fdf48c02d6d8a0bdbbaf8c3e5b17eec0d05febe2cf42f7a07a5be46c74c5b91898ea522baebd0684ca54cc5c1f8
- SSDEEP
  
  1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNC2:26a+2OtEvwDpjtz5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2