da63f65188d28385da056dd67d70b0430674ae747b399285db5f6574b7a53e49 | Triage

Sharing

General

Target

2024-11-21_d1a6586361b91596bb11fa4806f875f1_cryptolocker
Size

55KB
Sample

241121-jjnnps1alm
MD5

d1a6586361b91596bb11fa4806f875f1
SHA1

ce9c394419d51f267d04445d94b6700fe095333e
SHA256

da63f65188d28385da056dd67d70b0430674ae747b399285db5f6574b7a53e49
SHA512

656a420e4eedc80f173552391c84bd2be63fb79896b7f15f8d57c05ba6c0817079cbb629b4ad80f1a49e4c8d6d4db0063264aa2520930d4bf502d2bcf45f50a5
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIT:X6QFElP6n+gJBMOtEvwDpjBtExmlw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_d1a6586361b91596bb11fa4806f875f1_cryptolocker
- Size
  
  55KB
- MD5
  
  d1a6586361b91596bb11fa4806f875f1
- SHA1
  
  ce9c394419d51f267d04445d94b6700fe095333e
- SHA256
  
  da63f65188d28385da056dd67d70b0430674ae747b399285db5f6574b7a53e49
- SHA512
  
  656a420e4eedc80f173552391c84bd2be63fb79896b7f15f8d57c05ba6c0817079cbb629b4ad80f1a49e4c8d6d4db0063264aa2520930d4bf502d2bcf45f50a5
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIT:X6QFElP6n+gJBMOtEvwDpjBtExmlw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2