e1431be4ece9d78be0164476db03079b0cfb71413889509f8d7cf366d1f25722 | Triage

Sharing

General

Target

2024-11-21_17db13875713a531b2b8e16fe6fc36ca_cryptolocker
Size

69KB
Sample

241121-h7kfhsyhqf
MD5

17db13875713a531b2b8e16fe6fc36ca
SHA1

0764fe69eeb93b74d78b308627cc554b64bc6d38
SHA256

e1431be4ece9d78be0164476db03079b0cfb71413889509f8d7cf366d1f25722
SHA512

191a035a9b99bda987e5628cb3f49194dc2d5552f14d77a85ff5aaa94f7620d79b06ca6ee140b2eae4ed25f929bbfb6ffde3cff9be392401ad0b5e22af9d6577
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEr:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_17db13875713a531b2b8e16fe6fc36ca_cryptolocker
- Size
  
  69KB
- MD5
  
  17db13875713a531b2b8e16fe6fc36ca
- SHA1
  
  0764fe69eeb93b74d78b308627cc554b64bc6d38
- SHA256
  
  e1431be4ece9d78be0164476db03079b0cfb71413889509f8d7cf366d1f25722
- SHA512
  
  191a035a9b99bda987e5628cb3f49194dc2d5552f14d77a85ff5aaa94f7620d79b06ca6ee140b2eae4ed25f929bbfb6ffde3cff9be392401ad0b5e22af9d6577
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEr:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7z
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2