d08446443e2370c4896d1ea69af114ceccdce9cefbf063048f7788d3392bf6e3 | Triage

Sharing

General

Target

2024-11-20_d71869270b9a966c67faa68a7e5558e3_cryptolocker
Size

49KB
Sample

241120-f5reyasfpp
MD5

d71869270b9a966c67faa68a7e5558e3
SHA1

85781b2c04515caa91fc8978066f62686f432699
SHA256

d08446443e2370c4896d1ea69af114ceccdce9cefbf063048f7788d3392bf6e3
SHA512

2376fe9ef10176ece3ba8b92bfe2b2477cc39bee1dd45a1fbd06931e9386eca1623ba770994fe1799e9c1ce72a30b7e73962fe0963853f5f10be2571b347b7db
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatF:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_d71869270b9a966c67faa68a7e5558e3_cryptolocker
- Size
  
  49KB
- MD5
  
  d71869270b9a966c67faa68a7e5558e3
- SHA1
  
  85781b2c04515caa91fc8978066f62686f432699
- SHA256
  
  d08446443e2370c4896d1ea69af114ceccdce9cefbf063048f7788d3392bf6e3
- SHA512
  
  2376fe9ef10176ece3ba8b92bfe2b2477cc39bee1dd45a1fbd06931e9386eca1623ba770994fe1799e9c1ce72a30b7e73962fe0963853f5f10be2571b347b7db
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatF:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7h
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2