ee1eb04f50b92b7e3a73d370456e0453ef72484a6f65f60d9f6e11589d6da58d | Triage

Sharing

General

Target

2024-11-21_9d90ca9bbbc176ec88bd69cff208b369_cryptolocker
Size

70KB
Sample

241121-emg8waymbz
MD5

9d90ca9bbbc176ec88bd69cff208b369
SHA1

f382b6391ee8e9475b11f91ac9e8ebafbf7cc813
SHA256

ee1eb04f50b92b7e3a73d370456e0453ef72484a6f65f60d9f6e11589d6da58d
SHA512

38b6ef7daf10d5c138d8636c75e66f6e3231ed79235ad7c8e2c7c834b50ac70a077be329682e8ccd25f86a282907e0312afa9466e94c7aed349d32f7c9d47342
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI0tSbK:6j+1NMOtEvwDpjr8ox8UDEpN/jhOK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_9d90ca9bbbc176ec88bd69cff208b369_cryptolocker
- Size
  
  70KB
- MD5
  
  9d90ca9bbbc176ec88bd69cff208b369
- SHA1
  
  f382b6391ee8e9475b11f91ac9e8ebafbf7cc813
- SHA256
  
  ee1eb04f50b92b7e3a73d370456e0453ef72484a6f65f60d9f6e11589d6da58d
- SHA512
  
  38b6ef7daf10d5c138d8636c75e66f6e3231ed79235ad7c8e2c7c834b50ac70a077be329682e8ccd25f86a282907e0312afa9466e94c7aed349d32f7c9d47342
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI0tSbK:6j+1NMOtEvwDpjr8ox8UDEpN/jhOK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2