97be22b7ac7e547d6a86e8e28ad4f72968cb854c1fbe910e392a90bcad383ad0 | Triage

Sharing

General

Target

2024-01-10_7a9d5db65bd4436d7bf4989bbf382578_cryptolocker
Size

46KB
Sample

240111-gksypshge3
MD5

7a9d5db65bd4436d7bf4989bbf382578
SHA1

b81c4182af3bd7e1f3ab93ff821ca73e68378536
SHA256

97be22b7ac7e547d6a86e8e28ad4f72968cb854c1fbe910e392a90bcad383ad0
SHA512

3b23bd0e0e12ae2e253d9f594efbae6f16e0b67b0ff46caeebb767ded68357a0469accac45763d0eb64624738a7133434287a9886d26ba1860373bd3a4c6fcf9
SSDEEP

768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBC:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6Q

Score

7^/10

Malware Config

Targets

- Target
  
  2024-01-10_7a9d5db65bd4436d7bf4989bbf382578_cryptolocker
- Size
  
  46KB
- MD5
  
  7a9d5db65bd4436d7bf4989bbf382578
- SHA1
  
  b81c4182af3bd7e1f3ab93ff821ca73e68378536
- SHA256
  
  97be22b7ac7e547d6a86e8e28ad4f72968cb854c1fbe910e392a90bcad383ad0
- SHA512
  
  3b23bd0e0e12ae2e253d9f594efbae6f16e0b67b0ff46caeebb767ded68357a0469accac45763d0eb64624738a7133434287a9886d26ba1860373bd3a4c6fcf9
- SSDEEP
  
  768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBC:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6Q
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2