f2a96d73409803065911f88a4ac9311f7e81f7b41d9d9a2a46705cd24f10c7d5 | Triage

Sharing

General

Target

2024-11-21_816b2e5ef81139e47864599cafcc0673_cryptolocker
Size

46KB
Sample

241121-jf9f1azlh1
MD5

816b2e5ef81139e47864599cafcc0673
SHA1

c44efa2231bf020b38405d372721bde90f7a75c2
SHA256

f2a96d73409803065911f88a4ac9311f7e81f7b41d9d9a2a46705cd24f10c7d5
SHA512

a0e59e700d1297d2664a55673e737be102ae9085fdf0d167e4c55db8cfec0e51333b1e20a531ba9edfdc53e8df97d5361df6a31c64b0c6628a820e1ec8a63ff0
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk31:bm74zYcgT/EkM0ryfjd31

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_816b2e5ef81139e47864599cafcc0673_cryptolocker
- Size
  
  46KB
- MD5
  
  816b2e5ef81139e47864599cafcc0673
- SHA1
  
  c44efa2231bf020b38405d372721bde90f7a75c2
- SHA256
  
  f2a96d73409803065911f88a4ac9311f7e81f7b41d9d9a2a46705cd24f10c7d5
- SHA512
  
  a0e59e700d1297d2664a55673e737be102ae9085fdf0d167e4c55db8cfec0e51333b1e20a531ba9edfdc53e8df97d5361df6a31c64b0c6628a820e1ec8a63ff0
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk31:bm74zYcgT/EkM0ryfjd31
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2