9e899d2cf071a8b57165d27cd0fbe192bd1d281a6e253b9783bee9ed5bbe9923 | Triage

Sharing

General

Target

2024-08-09_9d0adcd3c2924dfffce911ccef20d00d_cryptolocker
Size

392KB
Sample

240809-xkl36ayalh
MD5

9d0adcd3c2924dfffce911ccef20d00d
SHA1

dc032c6ce49b6300db382802b0d5223f9f779c7f
SHA256

9e899d2cf071a8b57165d27cd0fbe192bd1d281a6e253b9783bee9ed5bbe9923
SHA512

3523c5250952008da9233ac3126d16d5ed25a8c43f68b6b83c67c7520e5798162454b58cab56ad4e1c4fb81873254ef61a6604cd5ea123e68b639fdb6975bba2
SSDEEP

6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRN:nnOflT/ZFIjBz3xjTxynGUOUhXRN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-09_9d0adcd3c2924dfffce911ccef20d00d_cryptolocker
- Size
  
  392KB
- MD5
  
  9d0adcd3c2924dfffce911ccef20d00d
- SHA1
  
  dc032c6ce49b6300db382802b0d5223f9f779c7f
- SHA256
  
  9e899d2cf071a8b57165d27cd0fbe192bd1d281a6e253b9783bee9ed5bbe9923
- SHA512
  
  3523c5250952008da9233ac3126d16d5ed25a8c43f68b6b83c67c7520e5798162454b58cab56ad4e1c4fb81873254ef61a6604cd5ea123e68b639fdb6975bba2
- SSDEEP
  
  6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRN:nnOflT/ZFIjBz3xjTxynGUOUhXRN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2