74bdfdfbcb3e2d9979006de83bafd6900142de38837f966d0318aa780de0e17e | Triage

Sharing

General

Target

2024-11-21_b519aad11c6a8c488b3d6b4358944cee_cryptolocker
Size

63KB
Sample

241121-jhyghsvjak
MD5

b519aad11c6a8c488b3d6b4358944cee
SHA1

95ad97e7e229b291eeacc064c7b5a7549783a7b5
SHA256

74bdfdfbcb3e2d9979006de83bafd6900142de38837f966d0318aa780de0e17e
SHA512

868ca5eb23c0e18f29d95ffbad1f9767c6383a1f28b90a7837beb4874ee958d7a09c3a4521f083f9bb3b8c57eaa8d5bced986814159288be4a8f3115f5334a58
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNuSY:TCjsIOtEvwDpj5HE/OUHnSMZn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_b519aad11c6a8c488b3d6b4358944cee_cryptolocker
- Size
  
  63KB
- MD5
  
  b519aad11c6a8c488b3d6b4358944cee
- SHA1
  
  95ad97e7e229b291eeacc064c7b5a7549783a7b5
- SHA256
  
  74bdfdfbcb3e2d9979006de83bafd6900142de38837f966d0318aa780de0e17e
- SHA512
  
  868ca5eb23c0e18f29d95ffbad1f9767c6383a1f28b90a7837beb4874ee958d7a09c3a4521f083f9bb3b8c57eaa8d5bced986814159288be4a8f3115f5334a58
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNuSY:TCjsIOtEvwDpj5HE/OUHnSMZn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2