7381b777e4545467106f2e5bf7751400f029b4f588c846aa396c399889d28651 | Triage

Sharing

General

Target

2024-08-25_96671cb6f07e25f491a511f06cc6df5c_cryptolocker
Size

40KB
Sample

240825-zbt4hsvenq
MD5

96671cb6f07e25f491a511f06cc6df5c
SHA1

e491c9410084c24b692f6b0519a8d3ef9ac8211e
SHA256

7381b777e4545467106f2e5bf7751400f029b4f588c846aa396c399889d28651
SHA512

88314560a739ff79bff5ab25ff57a52f6ac6dfd095e2b3d327b364539cd53f56d2380dbb7cdf18850e7ba807ce502e9a83c49ab682b0f9aa3db150e76a5fad3a
SSDEEP

768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qc6:fT+hsMQMOtEvwDpjoIHG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-25_96671cb6f07e25f491a511f06cc6df5c_cryptolocker
- Size
  
  40KB
- MD5
  
  96671cb6f07e25f491a511f06cc6df5c
- SHA1
  
  e491c9410084c24b692f6b0519a8d3ef9ac8211e
- SHA256
  
  7381b777e4545467106f2e5bf7751400f029b4f588c846aa396c399889d28651
- SHA512
  
  88314560a739ff79bff5ab25ff57a52f6ac6dfd095e2b3d327b364539cd53f56d2380dbb7cdf18850e7ba807ce502e9a83c49ab682b0f9aa3db150e76a5fad3a
- SSDEEP
  
  768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qc6:fT+hsMQMOtEvwDpjoIHG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2