a486d49a57eb80fdd50fb005a45668a18e2dcb0c99bc5acab4044c33c306be55 | Triage

Sharing

General

Target

2024-11-21_cc17ca74a22ace45b489a29602b6d694_cryptolocker
Size

29KB
Sample

241121-ermn6ayaqg
MD5

cc17ca74a22ace45b489a29602b6d694
SHA1

69b2ea40a1d62e5eeef3ae2d071e85b1e5315615
SHA256

a486d49a57eb80fdd50fb005a45668a18e2dcb0c99bc5acab4044c33c306be55
SHA512

8fbfd15ee48ae4d318fc31ca4f730bbeb55ef78d24610378d589ec8604ca8f2a625880261a88138a400731587563b426143f775c9bcc6c34b3258774fbf6f855
SSDEEP

384:v0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26Rsn1rCcOQtOOtEvwDpjqIGRS/Vb9hk:vQz7yVEhs9+js1SQtOOtEvwDpjz9+qK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_cc17ca74a22ace45b489a29602b6d694_cryptolocker
- Size
  
  29KB
- MD5
  
  cc17ca74a22ace45b489a29602b6d694
- SHA1
  
  69b2ea40a1d62e5eeef3ae2d071e85b1e5315615
- SHA256
  
  a486d49a57eb80fdd50fb005a45668a18e2dcb0c99bc5acab4044c33c306be55
- SHA512
  
  8fbfd15ee48ae4d318fc31ca4f730bbeb55ef78d24610378d589ec8604ca8f2a625880261a88138a400731587563b426143f775c9bcc6c34b3258774fbf6f855
- SSDEEP
  
  384:v0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26Rsn1rCcOQtOOtEvwDpjqIGRS/Vb9hk:vQz7yVEhs9+js1SQtOOtEvwDpjz9+qK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2