2624513a8a77d2920b999dc85de5418dad05ad2b9ce826c893bd644cfd8b1e19 | Triage

Sharing

General

Target

2024-01-06_9f113ce18568a673a7844e433b88e657_cryptolocker
Size

98KB
Sample

240107-peatyaecfj
MD5

9f113ce18568a673a7844e433b88e657
SHA1

80a8c73394cd665f28e9ba811998af5fe2540147
SHA256

2624513a8a77d2920b999dc85de5418dad05ad2b9ce826c893bd644cfd8b1e19
SHA512

b54593c4f6d2cb7f947f2d1a4167786c1b18e07eaff6a661924624e9ba84d0b3ed4ad2511d4f6cd0c3ce34c243b16044bdfe0aa61e3086e57d71ef47c806b7bd
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjz+:i5nkFGMOtEvwDpjNbwQEIika

Score

7^/10

Malware Config

Targets

- Target
  
  2024-01-06_9f113ce18568a673a7844e433b88e657_cryptolocker
- Size
  
  98KB
- MD5
  
  9f113ce18568a673a7844e433b88e657
- SHA1
  
  80a8c73394cd665f28e9ba811998af5fe2540147
- SHA256
  
  2624513a8a77d2920b999dc85de5418dad05ad2b9ce826c893bd644cfd8b1e19
- SHA512
  
  b54593c4f6d2cb7f947f2d1a4167786c1b18e07eaff6a661924624e9ba84d0b3ed4ad2511d4f6cd0c3ce34c243b16044bdfe0aa61e3086e57d71ef47c806b7bd
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjz+:i5nkFGMOtEvwDpjNbwQEIika
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2