4861e99918db9fbb6dc60dc7207ddec5dfb1e54f904f6831c197db02e2390944 | Triage

Sharing

General

Target

2024-11-21_02e9d30b868711e077b9053e6567ecf6_cryptolocker
Size

50KB
Sample

241121-h7btdayhqd
MD5

02e9d30b868711e077b9053e6567ecf6
SHA1

3425a4252530e2c461f78c3538ce147f7ecf8cd7
SHA256

4861e99918db9fbb6dc60dc7207ddec5dfb1e54f904f6831c197db02e2390944
SHA512

0ebdca600af25e873e1f0e33258d7c8dfa45b4a55b28e17c43d2880588c1d95f6f9bc785a33049e27a4cc94e55f21a1761fb74df9c0dfa9374a01733876a07eb
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0n7I:vj+jsMQMOtEvwDpj5HczerLO04BH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_02e9d30b868711e077b9053e6567ecf6_cryptolocker
- Size
  
  50KB
- MD5
  
  02e9d30b868711e077b9053e6567ecf6
- SHA1
  
  3425a4252530e2c461f78c3538ce147f7ecf8cd7
- SHA256
  
  4861e99918db9fbb6dc60dc7207ddec5dfb1e54f904f6831c197db02e2390944
- SHA512
  
  0ebdca600af25e873e1f0e33258d7c8dfa45b4a55b28e17c43d2880588c1d95f6f9bc785a33049e27a4cc94e55f21a1761fb74df9c0dfa9374a01733876a07eb
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0n7I:vj+jsMQMOtEvwDpj5HczerLO04BH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2