2af52cea3e2319e84211aa4da5eb70a9630081e21339a60805fc0a9ddf121f62 | Triage

Sharing

General

Target

2024-11-21_e233b1820b536880ae9f377db8a98b39_cryptolocker
Size

52KB
Sample

241121-hvq3jatqfk
MD5

e233b1820b536880ae9f377db8a98b39
SHA1

faaf05495aec1ed46d2a04bbd352712197753d71
SHA256

2af52cea3e2319e84211aa4da5eb70a9630081e21339a60805fc0a9ddf121f62
SHA512

7a2d71d76db7d080010ac93911ba4818d888fd0268e820a2494fb190d9be3fdc607b0cf0ea3716d7664d3f3b1b8ff8ba373d142a8c24524265f27648c99b089a
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0ntG:vj+jsMQMOtEvwDpj5HczerLO04Bj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_e233b1820b536880ae9f377db8a98b39_cryptolocker
- Size
  
  52KB
- MD5
  
  e233b1820b536880ae9f377db8a98b39
- SHA1
  
  faaf05495aec1ed46d2a04bbd352712197753d71
- SHA256
  
  2af52cea3e2319e84211aa4da5eb70a9630081e21339a60805fc0a9ddf121f62
- SHA512
  
  7a2d71d76db7d080010ac93911ba4818d888fd0268e820a2494fb190d9be3fdc607b0cf0ea3716d7664d3f3b1b8ff8ba373d142a8c24524265f27648c99b089a
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0ntG:vj+jsMQMOtEvwDpj5HczerLO04Bj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2