adc74f7256ef2acbad006632b5da843532c66e0022d1e8294bd0c1f32033999d | Triage

Sharing

General

Target

2024-11-21_d3612ca6ecfcf21baa8aac830f4a3267_cryptolocker
Size

79KB
Sample

241121-m8skqswldr
MD5

d3612ca6ecfcf21baa8aac830f4a3267
SHA1

6465d82b8d012e7c5bd08f153f3656cc757bae30
SHA256

adc74f7256ef2acbad006632b5da843532c66e0022d1e8294bd0c1f32033999d
SHA512

cd02e067f4a61a85ea4e79d60bab810281cbc7d5bc85ecab9819331b70936d84587d73767ce8511825660de34297917bb9fc8692b9cf5ddd4988d6812be4fae0
SSDEEP

1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktj:X6a+SOtEvwDpjBZYvQd2i

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_d3612ca6ecfcf21baa8aac830f4a3267_cryptolocker
- Size
  
  79KB
- MD5
  
  d3612ca6ecfcf21baa8aac830f4a3267
- SHA1
  
  6465d82b8d012e7c5bd08f153f3656cc757bae30
- SHA256
  
  adc74f7256ef2acbad006632b5da843532c66e0022d1e8294bd0c1f32033999d
- SHA512
  
  cd02e067f4a61a85ea4e79d60bab810281cbc7d5bc85ecab9819331b70936d84587d73767ce8511825660de34297917bb9fc8692b9cf5ddd4988d6812be4fae0
- SSDEEP
  
  1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktj:X6a+SOtEvwDpjBZYvQd2i
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2