985e17ea08fa616547aa2e88b0cc4e90b1dd5dfd3054402be3f1e02889cb39eb | Triage

Sharing

General

Target

2024-11-21_4a6ecf7b77344638d5dcbfc79c8d017c_cryptolocker
Size

79KB
Sample

241121-hh2cqszfqq
MD5

4a6ecf7b77344638d5dcbfc79c8d017c
SHA1

c972eb6dc1776ca4776da25150e39abfc86062e6
SHA256

985e17ea08fa616547aa2e88b0cc4e90b1dd5dfd3054402be3f1e02889cb39eb
SHA512

f9f107868961020876daea5f610ac2205b1c2b51fc04111ca0cd8c830f0e1b77f81f0a60dd81ae1f39f96b139b49b482f7550f626619f25abac9a67a3454ffe7
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktr:X6a+SOtEvwDpjBZYvQd2C

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_4a6ecf7b77344638d5dcbfc79c8d017c_cryptolocker
- Size
  
  79KB
- MD5
  
  4a6ecf7b77344638d5dcbfc79c8d017c
- SHA1
  
  c972eb6dc1776ca4776da25150e39abfc86062e6
- SHA256
  
  985e17ea08fa616547aa2e88b0cc4e90b1dd5dfd3054402be3f1e02889cb39eb
- SHA512
  
  f9f107868961020876daea5f610ac2205b1c2b51fc04111ca0cd8c830f0e1b77f81f0a60dd81ae1f39f96b139b49b482f7550f626619f25abac9a67a3454ffe7
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktr:X6a+SOtEvwDpjBZYvQd2C
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2