217e54670934b8bb432d12ca8ba263f3b8f44c6ba2577b84a2f87f3171f5ac45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-02_7220fa87611c14e0667488088615f989_cryptolocker
Size

49KB
Sample

240902-q34bts1frr
MD5

7220fa87611c14e0667488088615f989
SHA1

348d36ec98f702521d3b74774ba2b5c854e769eb
SHA256

217e54670934b8bb432d12ca8ba263f3b8f44c6ba2577b84a2f87f3171f5ac45
SHA512

4de4ffef4ee5000fd7cf1fd42e79f29fda11853a9338662c5e457f11c5193c2530119d4953a044dd13ef9eb74e2c438cf852cc1a8b189125ca2e420948c22cea
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshn:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-02_7220fa87611c14e0667488088615f989_cryptolocker
- Size
  
  49KB
- MD5
  
  7220fa87611c14e0667488088615f989
- SHA1
  
  348d36ec98f702521d3b74774ba2b5c854e769eb
- SHA256
  
  217e54670934b8bb432d12ca8ba263f3b8f44c6ba2577b84a2f87f3171f5ac45
- SHA512
  
  4de4ffef4ee5000fd7cf1fd42e79f29fda11853a9338662c5e457f11c5193c2530119d4953a044dd13ef9eb74e2c438cf852cc1a8b189125ca2e420948c22cea
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatshn:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7K
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2