967d65b380ff655e182930309b8fbb33c0d5742368dc94bc7565f42bddfa08c7 | Triage

Sharing

General

Target

2024-08-22_0dd0af5bdf8f4b5160fd66c464ad1839_cryptolocker
Size

54KB
Sample

240822-mf4gjavbrl
MD5

0dd0af5bdf8f4b5160fd66c464ad1839
SHA1

307fa7d49d1546fc8ff880dbca25d2d784254b1c
SHA256

967d65b380ff655e182930309b8fbb33c0d5742368dc94bc7565f42bddfa08c7
SHA512

0b7cb777ee75fc0f51bbd36feef0f612c386cbfe722e7d40eb76c3251235168d46015461fd2b5cdef15eadae611a1f3ba2783551257105dcf9ea3b03313dd00e
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFvPr:vj+jsMQMOtEvwDpj5HH1nw73KOFr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-22_0dd0af5bdf8f4b5160fd66c464ad1839_cryptolocker
- Size
  
  54KB
- MD5
  
  0dd0af5bdf8f4b5160fd66c464ad1839
- SHA1
  
  307fa7d49d1546fc8ff880dbca25d2d784254b1c
- SHA256
  
  967d65b380ff655e182930309b8fbb33c0d5742368dc94bc7565f42bddfa08c7
- SHA512
  
  0b7cb777ee75fc0f51bbd36feef0f612c386cbfe722e7d40eb76c3251235168d46015461fd2b5cdef15eadae611a1f3ba2783551257105dcf9ea3b03313dd00e
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFvPr:vj+jsMQMOtEvwDpj5HH1nw73KOFr
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2