87fe248315c90eeff715f362045b8d5b00656c179a88324a1b9947033ac3bc6f | Triage

Sharing

General

Target

2024-11-21_4655d214f6c2a4e69a6e2ca927e59ccc_cryptolocker
Size

52KB
Sample

241121-jakwfszle1
MD5

4655d214f6c2a4e69a6e2ca927e59ccc
SHA1

01b65a04de3847cb8039692b3b20fee464fca11a
SHA256

87fe248315c90eeff715f362045b8d5b00656c179a88324a1b9947033ac3bc6f
SHA512

b5e1eeff94d8e83986402f10ab0f4ed12ea949c90842c50011243e0116a2dccfe06801a00a489a8514f0244e8ffcf3dc1281c5e4cfeeaf75b32d9f747b29b781
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nt4:vj+jsMQMOtEvwDpj5HczerLO04BJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_4655d214f6c2a4e69a6e2ca927e59ccc_cryptolocker
- Size
  
  52KB
- MD5
  
  4655d214f6c2a4e69a6e2ca927e59ccc
- SHA1
  
  01b65a04de3847cb8039692b3b20fee464fca11a
- SHA256
  
  87fe248315c90eeff715f362045b8d5b00656c179a88324a1b9947033ac3bc6f
- SHA512
  
  b5e1eeff94d8e83986402f10ab0f4ed12ea949c90842c50011243e0116a2dccfe06801a00a489a8514f0244e8ffcf3dc1281c5e4cfeeaf75b32d9f747b29b781
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nt4:vj+jsMQMOtEvwDpj5HczerLO04BJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2